Vanta (Pro)
The Vanta connector imports failing compliance tests from Vanta. DefectDojo creates a Record for each Vanta integration, plus an organization-wide catch-all for tests that belong to none.
Prerequisites
An OAuth client ID and secret from Vanta. Create them under Settings > Developer Console as a “Manage Vanta” app — other app types will not have the access this connector needs.
Connector Mappings
- Enter your Vanta API URL in the Location field.
- Enter the OAuth client ID in the Client ID field.
- Enter the client secret in the Client Secret field.
- Optionally, set a Minimum Severity to limit which findings are imported.
Each failing resource of a failing test becomes a finding, grouped under the integration the test belongs to — so a single failing control across many resources produces a finding per resource.