Open-source vulnerability management, DevSecOps and ASPM

Pro demo · Community demo · Docs · Slack · Community · Website

DefectDojo Pro home page. Try it on the live Pro demo. The Community Edition demo is at demo.defectdojo.org. Sign-in details for both are under Demo.

DefectDojo is a DevSecOps, ASPM (application security posture management), and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting.

Demo

Pro Edition: pro.demo.defectdojo.com

OWASP Community Edition: demo.defectdojo.org

Either demo environment can be logged into with username admin and password 1Defectdojo@demo#appsec. Please note that the demos are publicly accessible and reset every day. Do not put sensitive data in the demo. An easy way to test DefectDojo is to upload some sample scan reports.

Quick Start for Docker Compose

git clone https://github.com/DefectDojo/django-DefectDojo && cd django-DefectDojo && docker compose up

This quick start guide will do the following

Clone the repository and change directories
Start the application
Obtain admin credentials in the initializer logs. The first initialization can take up to 3 minutes to run.

if running DefectDojo in detached mode via docker compose up -d, obtain admin credentials from the initializer logs with the command below. Please note, the initializer can take up to 3 minutes to run.

docker compose logs initializer | grep "Admin password:"