Asset modelling
See the AI in every scanned repository: coding assistants, MCP servers, models, AI packages, AI services, agent skills and AI provider keys
How DefectDojo calculates an Asset Health Grade
How DefectDojo calculates an Asset Health Grade
DefectDojo Pro - Asset Hierarchy Overhaul
Understand Organizations, Assets, Engagements, Tests and Findings
Understanding Assets in DefectDojo OS
Understanding Assets in DefectDojo Pro
How DefectDojo ranks your Findings
How to use the Calendar in DefectDojo OS
How to use the Calendar in DefectDojo Pro
Build a plan of hierarchy changes from operations or a CSV file, review the full diff, then apply it as one change and undo it if needed
Tracking third-party libraries and software components in DefectDojo Pro
Container Image locations model the image a finding was found in, identified by registry, repository and digest, and the assets that run it
Define typed custom fields per record type, fill them in on the forms and on each record, and turn them on as typed table columns
Customize the Platform, Lifecycle and Origin dropdown options on your assets
Understanding Engagements in DefectDojo OS
Understanding Engagements in DefectDojo Pro
Understanding Environments in OS DefectDojo
Understanding Environments in DefectDojo Pro
Export an Asset's AI inventory as a CycloneDX 1.6 AI bill of materials, with evidence and authorization decisions
Export an Asset's dependency inventory as CycloneDX or SPDX, and its finding statuses as a CycloneDX VEX document
Understanding Findings in DefectDojo OS
Understanding Findings in DefectDojo Pro
Find the Assets a connector left unplaced or that lack priority data, fix them in bulk, and know when onboarding is complete
Apply a published scheme's patch windows and scan cadence as one preset, preview the plan first, and revert it later
Integration of repositories to navigate to the location of findings in the source code.
See every Location an Asset has on one map, grouped by what the Locations share, with active finding counts on every node
What Locations are and why they replace Endpoints
What happens when you migrate existing Endpoint data to Locations
Understanding Organizations in DefectDojo OS
Understanding Organizations in DefectDojo Pro
Benchmark an Asset against the OWASP Application Security Verification Standard
Record which tests are PCI scans, track the Requirement 11 quarterly and annual evidence, and export the grid an assessor asks for
Record PCI DSS scope per Asset, run the Requirement 6.3.3 patch clock, and export a scope inventory
Decide how Organizations and Assets should map to your teams, systems and reports, with a copyable LLM prompt that drafts the tree for you
Understanding Questionnaires in OS DefectDojo
Understanding Regulations in DefectDojo OS
Understanding Regulations in DefectDojo Pro
Tracking Microservices
Configure Service Level Agreements for different Assets
Code locations model where a static-analysis finding lives in source, and record its movement history as code evolves
Understanding Surveys in DefectDojo Pro
Use Tags to create a new slice of your data model
Use Tags to create a new slice of your data model
Understanding Tests in DefectDojo OS
Understanding Tests in DefectDojo Pro
Exploit and threat evidence as a first-class input to Priority and Risk
Manage software dependencies and SBOMs as Locations
Day-to-day use of URL Locations as the Endpoints replacement
What changes, and what stays put, when you move Assets between Organizations, change their parents, or re-map Connector Records