# DefectDojo

> Automated vulnerability management platform that centralizes security findings from multiple tools and uses AI to prioritize remediation at scale

- **Canonical URI:** https://www.vioscale.ai/software/defectdojo
- **Category:** Vulnerability Management
- **Homepage:** https://defectdojo.com/
- **Also known as:** defectdojo
- **Profile claimed by vendor:** no
- **Last updated:** 2026-08-19T22:54:16.427Z

## Vioscale score

**53.3 / 100**, confidence 26% (low). Computed 2026-09-01.

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 80 | 0.052 | 4.2 | ✓ |
| reliability | 0 | 0.073 | 0 | - |
| capabilities | 0 | 0.04877777777777778 | 0 | - |
| integrations | 77.6 | 0.04066666666666666 | 3.2 | ✓ |
| security_posture | 5 | 0.073 | 0 | - |
| pricing_transparency | 25 | 0.084 | 2.1 | ✓ |

## Pricing

_As of 2026-08-19, [verify at source](https://defectdojo.com/pricing). Independently observed._

Hybrid · Free tier

> Free community edition; Pro pricing available via custom quote

| Plan | Price | Free | Commitment |
|---|---|:--:|---|
| Free | Free | ✓ | - |
| Pro | Contact sales | - | - |

### Free

Community Edition with core vulnerability management

- Core finding import & deduplication
- REST API & Swagger UI
- Manual import & reimport
- Basic dashboard & reporting
- Role-based access control
- Authentication (username, LDAP, SAML, OAuth)
- Automation (Rules Engine)
- Tunable deduplication
- Background imports
- CLI & integrations
- Universal parser (CSV/JSON)
- Customizable dashboards & dark mode

### Pro (Contact sales)

Enterprise edition with cloud hosting, advanced features, and priority support

- All Free features
- Cloud-hosted option
- Multi-factor authentication (MFA)
- Premium support & SLAs
- SOC & AppSec integration
- MCP integration
- Tenant isolation & encryption at rest
- AI-driven insights
- Known Exploited Vulnerabilities (KEV) enrichment
- Advanced rules engine

## About

DefectDojo is an open-source and commercial platform for managing vulnerabilities across organizations. It aggregates findings from 500+ security tools, automatically deduplicates and triages them, and enables teams to enforce remediation SLAs and automate security workflows. Available as both a free community edition and a paid professional version.

_Independently observed._

## Platform & deployment

- **Platforms:** CLI, Web
- **Deployment:** Cloud / SaaS, On-premise, Self-hosted

## Integrations (8)

_Independently observed._

- Snyk
- SonarQube
- AWS
- Horusec
- Jira
- GitHub Issues
- ChatGPT
- Claude

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.model | freemium | [link](https://defectdojo.com/pricing) | 2026-08-19 | 60% (medium) |
| pricing.free_tier | yes | [link](https://defectdojo.com/pricing) | 2026-08-19 | 60% (medium) |
| pricing.price_level | low | [link](https://defectdojo.com/pricing) | 2026-08-19 | 60% (medium) |
| pricing.transparent | no | [link](https://defectdojo.com/pricing) | 2026-08-19 | 60% (medium) |

### integrations

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| integrations.count | 500 | [link](https://defectdojo.com/pricing) | 2026-08-19 | 60% (medium) |

### market

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| market.availability | `{"hqCountry":"US","primaryMarkets":["US","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | [link](https://defectdojo.com/pricing) | 2026-08-19 | 75% (high) |

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.gdpr | yes | [link](https://defectdojo.com/blog/security-programs-succeed-or-fail-solely-on-vulnerability-management) | 2026-08-19 | 75% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/defectdojo). Independent, evidence-based software intelligence. Cite the canonical URI.*