Tool Reference on DefectDojo Documentation

Upstream Connectors Tool Reference

Mon, 01 Jan 0001 00:00:00 +0000

Note: Upstream Connectors are a DefectDojo Pro-only feature.

When setting up a Connector for a supported tool, you’ll need to give DefectDojo specific information related to the tool’s API. At a base level, you’ll need:

Downstream Connectors Tool Reference

Mon, 01 Jan 0001 00:00:00 +0000

Here are specific instructions detailing how to set up a DefectDojo Downstream Connector with a third party Issue Tracker.

AccuKnox

Mon, 01 Jan 0001 00:00:00 +0000

The AccuKnox connector imports cloud security posture (CSPM) findings across your whole AccuKnox tenant. DefectDojo creates a Record for each connected cloud account, plus a tenant-level catch-all Record — findings that match no specific account land there, so nothing is silently dropped.

Action1

Mon, 01 Jan 0001 00:00:00 +0000

The Action1 connector imports endpoint vulnerability findings from Action1. DefectDojo creates a Record for each endpoint (host).

Prerequisites

An Action1 API key and secret pair. The key acts as the OAuth client ID and the secret is never logged.

Acunetix 360

Mon, 01 Jan 0001 00:00:00 +0000

The Acunetix 360 connector imports DAST vulnerability findings from the Acunetix 360 cloud platform (the Invicti platform). DefectDojo discovers your account’s scanned websites and creates a Record for each website; the findings for a website come from its latest completed scan.

Akamai

Mon, 01 Jan 0001 00:00:00 +0000

The Akamai API Security connector uses an API key to pull security findings from the Akamai API. DefectDojo will discover your Akamai environment and create separate Records for each Application and Host configured in your account.

Akto

Mon, 01 Jan 0001 00:00:00 +0000

The Akto connector imports API security testing findings from Akto. DefectDojo creates a Record for each Akto API collection.

Prerequisites

An Akto API key, created under Settings > Integrations > Akto APIs in the Akto dashboard. It is sent as the X-API-KEY header and is never logged.

Alert Logic

Mon, 01 Jan 0001 00:00:00 +0000

The Alert Logic connector imports vulnerability exposures from your Alert Logic account. DefectDojo creates a Record for each Alert Logic deployment, with no per-deployment configuration required.

Anchore Enterprise

Mon, 01 Jan 0001 00:00:00 +0000

The Anchore connector uses a user’s API token to pull data from Anchore Enterprise. Assets will be mapped and discovered based on “Applications”, which are composed of multiple Images in Anchore - see Anchore Enterprise Documentation for more information.

AppCheck

Mon, 01 Jan 0001 00:00:00 +0000

The AppCheck connector imports DAST vulnerability findings from the AppCheck NG platform. DefectDojo discovers every scan on your account and creates a Record for each scan — there is no per-scan configuration.