DefectDojo Pros and Cons

Defectdojo has all the Possible features which is needed for Vulnerability Management. if you want to showcase the test which is done in last month you can showcase that with easy matric. Review collected by and hosted on G2.com.

Enterprise version is too slow if i upload large file /. Review collected by and hosted on G2.com.

The product has a very simple user interface that enables most users to easily navigate around without any hardship or challenge as it is a straightforward tool to most beginners. The software integration with Jira has a huge impact hence it enhances productivity. The software has a very great source vulnerability management tool and because of this, I would recommend it to all the users. Review collected by and hosted on G2.com.

I can't give five stars to the platform as it has poor customer support that doesn’t respond and solve customers' issues as supposed to be as it is an open-source solution. Review collected by and hosted on G2.com.

DefectDojo is a straightforward platform hence any user can use it effortlessly with any difficulty when using it. The product helps its users to be always updated as it provides them with notifications via Slack or email. The product has integration features hence it integrates with other reporting tools increasing productivity. Review collected by and hosted on G2.com.

There is not much to dislike about the product but customer support is not prioritized as the support team could take days to solve customer’s issues. Review collected by and hosted on G2.com.

-Since its opensourced its free to use

-Supports importing reports from lots of other tools

- Easy to integrate with other tools

-SSO supported

-Easy to install Review collected by and hosted on G2.com.

-They are removing features from opensource version and putting them into paid version

-UI is bit finicky Review collected by and hosted on G2.com.

If you are looking for a good open source vulnerability management tool, than this is it. It can be integrated with different VAPT scanner reports and the complete lifecycle management can be done for the Vulnerabilites identified. Review collected by and hosted on G2.com.

It should also have APIs available that can be easily integrated with certain SIEM tools. Review collected by and hosted on G2.com.

Free to use, Very powerful vulnerability management tool, very structured REST APIs, and easy to integrate with other reporting tools. Review collected by and hosted on G2.com.

Nothing much I can think of at the moment. But I have had trouble sometimes when deploying, like dependency errors at the first time installing. Review collected by and hosted on G2.com.

Easy to Use, Easy to set up. easy to manage, best vulnerability management tool Review collected by and hosted on G2.com.

Least Direct tools integration and automatic import scan result is not there Review collected by and hosted on G2.com.

Ease of use, opensource, developed by OWASP team, compatible with lots of security scanners Review collected by and hosted on G2.com.

very less tools are supported with direct console integration, we have to manually import the scan files Review collected by and hosted on G2.com.

DefectDojo's main purpose is to cut down on the time security professionals spend logging vulnerabilities. DefectDojo achieves this by providing a vulnerability templating system, imports for popular vulnerability scanners, report production, and metrics. Review collected by and hosted on G2.com.

not find any unusual. haven't found any bug yet. Review collected by and hosted on G2.com.

The most positive side is that there is a dockerized solution for Defectdojo. On another side, the fact that you can integrate it with Jira is a huge plus.

I also appreciate the notifications via Slack and email. Review collected by and hosted on G2.com.

The fact that DefectDojo is an open-source solution, there is no part for customer support. Sometimes it takes you days to solve an issue. Review collected by and hosted on G2.com.