DefectDojo
Centralized platform that aggregates security findings from multiple tools, eliminates duplicates, and prioritizes remediation based on actual exploitability
- Also known as
- defectdojo
Available worldwide · Popular in: US, EU
What is DefectDojo?
A unified vulnerability management system that ingests findings from over 500 security tools, deduplicates them across scanners, and prioritizes issues based on risk factors like EPSS scores and asset context rather than severity alone.
DefectDojo pricing
Plans, per-tier features and add-ons, dated and linked to live pricing. Pricing changes often; always verify at source before you rely on it.
From $100/mo (metered per finding) or from $20,000/yr annual (48% savings). Free open-source tier available.
Pay As You Go
- All DefectDojo Pro features
Pre-Pay & Save
- advisor_runs
- 4
- repositories
- 5
- sensei_fixes
- 25
- threat_models
- 10
- cloud_accounts
- 1
- findings_per_year
- 1000000+
- All DefectDojo Pro features
- Sensei AI included
What DefectDojo does
The capabilities that matter for vulnerability management, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.
- Authenticated scan
- -
- Agent based
- -
- Agentless cloud
- -
- Asset discovery
- ✓
- Scap oval
- -
- PCI asv
- -
- Remediation workflow
- ✓
- Fedramp
- -
- Open source
- ✓
Platform & deployment
Independently observed- CLI
- Web
- Cloud / SaaS
- Self-hosted
Integrations (17)
Independently observed- Wiz←•
- Tenable←•
- Qualys←•
- CrowdStrike←•
- GitHub⇄•
- GitLab⇄•
- Azure DevOps⇄•
- ServiceNow⇄•
- tfsec←•
- Snyk
- SonarQube
- AWS
- Horusec
- Jira
- GitHub Issues
- ChatGPT
- Claude
DefectDojo FAQ
Common questions about DefectDojo, answered from independent, dated evidence.
What is DefectDojo?
An open source solution for managing vulnerabilities and application security posture within DevSecOps workflows It is indexed under Vulnerability Management.
Source: https://defectdojo.com/
How much does DefectDojo cost?
DefectDojo does not publish its prices. Pricing is quoted on request, across 2 plans (Free and Pro), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.
Source: https://defectdojo.com/pricing
What platforms does DefectDojo support?
DefectDojo supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.
Source: https://defectdojo.com/pricing
Can DefectDojo be self-hosted?
Yes. DefectDojo can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.
Source: https://defectdojo.com/pricing
What does DefectDojo integrate with?
We have confirmed 8 integrations for DefectDojo, including Snyk, SonarQube, AWS, Horusec, Jira, GitHub Issues, ChatGPT and Claude. This is what we could verify from public sources, so the vendor may support others we have not indexed.
Source: https://defectdojo.com/pricing
What security certifications does DefectDojo have?
We have independently confirmed GDPR for DefectDojo. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as DefectDojo not holding them. Always confirm compliance directly before you rely on it.
Source: https://defectdojo.com/blog/security-programs-succeed-or-fail-solely-on-vulnerability-management
Where is DefectDojo available?
DefectDojo is available worldwide. Its primary markets are the United States and the EU. The vendor is headquartered in the United States.
Source: https://defectdojo.com/pricing
DefectDojo alternatives
Other vulnerability management we track, ranked by the same independent score.
- Qualys VMDRIdentify and remediate vulnerabilities across your infrastructure using threat intelligence and automated workflows to reduce security risklow · 13%
- Rapid7 InsightVMVulnerability scanner integrated with attack surface management and cloud security for unified risk assessmentlow · 44%
- Tenable Vulnerability Managementmedium · 63%
Compare DefectDojo
Side by side against other vulnerability management, attribute by attribute, with a source on every value.
The vioscaleAI score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for DefectDojo, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Pricing transparency | 100 | 0.05 | 5.2 | ✓ |
| Integrations | 78 | 0.05 | 4.0 | ✓ |
| Capabilities | 58 | 0.05 | 3.0 | ✓ |
| Price level | 25 | 0.04 | 1.1 | ✓ |
| Reliability | 0 | 0.09 | 0.0 | - |
| Security posture | 5 | 0.21 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Content
| Attribute | Value | Evidence |
|---|---|---|
| Faq | 7 items | mediumsource · 2026-09-10 · 64% |
Features
| Attribute | Value | Evidence |
|---|---|---|
| Capabilities | Open source, Asset discovery, Remediation workflow | mediumsource · 2026-09-29 · 60% |
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 500 | mediumsource · 2026-09-29 · 60% |
Market
| Attribute | Value | Evidence |
|---|---|---|
| Availability | HqCountry: US · PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: … | highsource · 2026-09-29 · 75% |
Pricing
Security
Is DefectDojo the right choice for you?
Tell us the job, the constraints and what you weigh most, and we will rank DefectDojo against the rest of the vulnerability management we index, using the same dated evidence weighted your way.
Free to run, no account needed to start. How the evaluation works
Is this your product?
This profile was built from public sources without asking you. You can take the badge below and use it anywhere, and you can claim the profile to correct anything we got wrong. Both are free, and neither moves DefectDojo up or down: nobody can buy rank here, including you.
Take the badge
Live, always current, and free to use on your own site. It shows DefectDojo's independent score and links back to this profile.
<a href="https://www.vioscale.ai/software/defectdojo" target="_blank" rel="noopener">
<img src="https://www.vioscale.ai/badge/software/defectdojo.svg" alt="DefectDojo, verified on vioscaleAI" width="330" height="76" loading="lazy" />
</a>Markdown, for a README →
[](https://www.vioscale.ai/software/defectdojo)Claim the profile
Verify you control the domain, then point us at the pages that state the facts about DefectDojo and add your own description and media. Free, and it does not change the score.
- Correct anything wrong, with evidence
- Point our crawler at the pages that matter
- Write your own description and add media
Not the owner? How vendor profiles work