Asset modelling

Asset Health Grade →

How DefectDojo calculates an Asset Health Grade

Asset Health Grade →

How DefectDojo calculates an Asset Health Grade

Asset Hierarchy →

DefectDojo Pro - Asset Hierarchy Overhaul

Asset Hierarchy: Overview →

Understand Organizations, Assets, Engagements, Tests and Findings

Assets →

Understanding Assets in DefectDojo OS

Assets →

Understanding Assets in DefectDojo Pro

Assign Priority, Risk and SLAs →

How DefectDojo ranks your Findings

Calendar →

How to use the Calendar in DefectDojo Pro

Calendar →

How to use the Calendar in DefectDojo Pro

Components →

Tracking third-party libraries and software components in DefectDojo Pro

Engagements →

Understanding Engagements in DefectDojo OS

Engagements →

Understanding Engagements in DefectDojo Pro

Exporting SBOMs and VEX →

Export an Asset's dependency inventory as CycloneDX or SPDX, and its finding statuses as a CycloneDX VEX document

Findings →

Understanding Findings in DefectDojo OS

Findings →

Understanding Findings in DefectDojo Pro

Link Findings to Source Code →

Integration of repositories to navigate to the location of findings in the source code.

Locations Overview →

What Locations are and why they replace Endpoints

Migrating From Endpoints →

What happens when you migrate existing Endpoint data to Locations

Organizations →

Understanding Organizations in DefectDojo OS

Organizations →

Understanding Organizations in DefectDojo Pro

OWASP ASVS Benchmarks →

Benchmark an Asset against the OWASP Application Security Verification Standard

Questionnaires →

Understanding Questionnaires in OS DefectDojo

Services →

Tracking Microservices

SLA Configuration →

Configure Service Level Agreements for different Assets

Source Code Locations →

Code locations model where a static-analysis finding lives in source, and record its movement history as code evolves

Surveys →

Understanding Surveys in DefectDojo Pro

Tagging Objects →

Use Tags to create a new slice of your data model

Tagging Objects →

Use Tags to create a new slice of your data model

Tests →

Understanding Tests in DefectDojo OS

Tests →

Understanding Tests in DefectDojo Pro

Threat Intelligence →

Exploit and threat evidence as a first-class input to Priority and Risk

Working With SBOMs →

Manage software dependencies and SBOMs as Locations

Working With URLs →

Day-to-day use of URL Locations as the Endpoints replacement