Orca Security (Pro)
The Orca Security connector imports open alerts from Orca — vulnerabilities, misconfigurations, malware and secrets alike. DefectDojo creates a Record for each connected cloud account.
Prerequisites
An Orca API token.
Orca tokens are region-scoped, so the token and the API host must belong to the same region. If a Sync fails to authenticate with a token you know is valid, check that the Location matches the token’s region.
Connector Mappings
- Enter your region-matched Orca API host in the Location field.
- Enter your Orca API token in the Secret field.
- Optionally, set a Minimum Severity to limit which findings are imported.
Each connected cloud account becomes a Record. Only open alerts are imported, so alerts you close in Orca are reflected in DefectDojo on the next Sync.