Get started
Get Started With DefectDojo
Get Started With DefectDojo
DefectDojo FAQ
Working with different UIs in DefectDojo
List of Pro Features in DefectDojo
Expand the storage available for uploaded files on a Docker Compose deployment without altering the deployment itself
How to amend the documentation
The four things to capture, where each one lives for Compose and Kubernetes deployments, and how to confirm a backup can actually be restored
How DefectDojo Cloud is deployed and isolated on Google Kubernetes Engine.
Use Cases and examples
DefectDojo is highly configurable.
Reconnect to your DefectDojo Instance
How to contribute to parsers
Install DefectDojo Pro on Kubernetes using the Helm chart, covering infrastructure, secrets, and the install itself
Upgrade a self-hosted DefectDojo Pro deployment that runs on Docker Compose with dojo-compose-cli
Upgrade an existing DefectDojo Pro Helm release, including pulling the chart, running the upgrade, and rolling back
What is specific to OpenShift when deploying self-hosted DefectDojo Pro: security context constraints, Routes, and ReadWriteMany storage
The outbound IP addresses DefectDojo Cloud connects from, for allowlisting in your external firewalls.
Deploy DefectDojo Pro with FIPS 140-3 validated cryptography using the -fips container images, for FedRAMP SC-13 and similar requirements
Running DefectDojo Pro FIPS images on Amazon ECS with the Fargate launch type
General guidance for sizing compute, memory, and storage for a self-hosted DefectDojo Pro deployment
DefectDojo supports various installation options.
Stage the DefectDojo Pro install artifacts on a host with internet access, then move them into an air-gapped network
Install self-hosted DefectDojo Pro on a single host using dojo-compose-cli, with PostgreSQL on a separate server
Use dojo-helm-cli to pull the DefectDojo Pro Helm chart and images, validate a cluster, deploy, and collect diagnostics
Step-by-step OSS to Pro migration on Kubernetes, a troubleshooting index keyed on the exact error text, and a post-migration verification checklist
Move your open source DefectDojo database and media files into a self-hosted DefectDojo Pro deployment
There is DefectDojo demo site running the latest officially released version
How we create releases
Bring a backed-up DefectDojo Pro deployment back on the same host or a new one: configuration and keys, both databases, uploaded files, and the same pinned version, for Docker Compose and Kubernetes
Configure DefectDojo Pro on-prem to reach Jira, SonarQube, and Connectors through an outbound HTTPS proxy
For use in Production environments, performance tweaks and backups are recommended.
Turn on the DefectDojo Pro sandbox on a self-hosted instance with one setting, and what it creates in your database
The self-hosted deployment models for DefectDojo Pro (Docker Compose and Kubernetes), what you need before you start, and how the rest of this section fits
Add a test, dev, or other DefectDojo instance to your account
The DefectDojo platform consists of several components that work together closely.
Supported upgrade procedure for self-hosted DefectDojo Pro, on both the Helm chart and Docker Compose
Why a large scan file fails to upload on Docker Compose, and which limit to raise
Why a large scan file fails to upload on Kubernetes, and which limit to raise in the Helm chart
Manage your subscription and account settings