🎨 Pro UI Changes (Pro)
In late 2023, DefectDojo, Inc. released a new UI for DefectDojo Pro, which is now the default UI for this edition.
The Pro UI brings the following enhancements to DefectDojo:
- Modern and sleek design using Vue.js.
- Optimized data delivery and load times, especially for large datasets.
- Access to new Pro features, including Upstream Connectors, Universal Importer, and Pro Metrics views.
- Improved UI workflows: better filtering, dashboards, and navigation.
The Pro UI is the default
From DefectDojo Pro 3.3 the Pro UI is the interface you land on after logging in, and the user-menu switch between the Pro UI and the Classic UI no longer exists. Your user menu (your name at the bottom of the sidebar) holds your profile, API token and documentation links. The few pages that still open in the Classic UI are marked in the sidebar and open in a new tab.
Navigational Changes
The Sidebar is organized into five sections: Overview, Sensei + AI, Connect, Act, and Settings. See The Sidebar Menu for the full layout and a table of where each page moved.
The Overview section holds the Home page and Dashboards, the Pro Metrics views (under Insights), My Work, Reporting, and the Calendar view.
The Sensei + AI section holds Sensei, Threat Modeling, and the AI-powered native API connection capabilities (MCP).
The Connect section holds everything that moves data in or out of DefectDojo: Upstream and Downstream Connectors to pull findings in from your scanners or push them out to issue trackers, the legacy Jira integration, Authorization (SSO providers, login and MFA settings), Diagnostics, and Import, where you can use the Add Findings form to Add Findings, use Smart Upload to handle infrastructure scanning tools, or use our external tools—Universal Importer and DefectDojo CLI—to streamline both the import and reimport processes of Findings and associated objects.
The Act section is where the work happens: the Triage Engine (Rules Engine), Vulnerability Explorer, Risk Acceptances, and Explore, which holds the Asset Hierarchy views for Organizations, Assets, Engagements, Tests, and Findings, along with Surveys and the Attack Surface (Endpoints or Locations, and Components).
The Settings section holds the administrative pages, grouped as System, Users & Permissions, Finding Workflow, Configuration, Notifications, Operations, and License & Support, with an All Settings page that lists and searches all of them. See The Sidebar Menu.
The Pro UI also has a new table format, used in the Asset Hierarchy to help with navigation. Each column can be clicked on to apply a relevant filter, and columns can be reordered to present data however you like.
The table also has a “Toggle Columns” menu which can add or remove columns from the table.
Filtering the Table
In this screenshot we are filtering for all Findings that are in “Sam’s Awesome Asset.” Once we click Apply, the contents of this Finding list will update to reflect the chosen filter.
New Dashboards
New Metrics visualizations are included in the Pro UI. All of these reports can be filtered and exported as PDFs to share them with a wider audience.
- The Executive Insights dashboard displays the current state of your Assets and Organizations.
- Priority Insights show the most critical findings with the option to filter for various timelines, Organizations, Assets, and Tags.
- The Program Insights dashboard displays the effectiveness of your security team and the cost savings associated with separating duplicates and false positives from actionable Findings.
- Remediation Insights displays your team’s effectiveness at remediating Findings.
- Tool Insights displays the effectiveness of your tool suite (and Upstream Connector pipelines) at detecting and reporting vulnerabilities.