About Connectors
Note: Connectors are a DefectDojo Pro-only feature.
DefectDojo allows users to build sophisticated API integrations, and gives users full control over how their vulnerability data is organized.
But everyone needs a starting point, and that’s where Connectors come in. Connectors are designed to get your security tools connected and importing data to DefectDojo as quickly as possible.
We currently support Connectors for the following tools, with more on the way:
- Acunetix 360
- Akamai API Security
- Anchore
- AWS Security Hub
- Azure DevOps
- Backstage
- Bitbucket
- Black Duck
- Bugcrowd
- BurpSuite
- Censys
- Checkmarx ONE
- Cloudflare
- Cobalt.io
- Contrast
- Coverity
- CrowdStrike Falcon
- Dependency-Track
- Docker Scout
- Edgescan
- Endor Labs
- GitGuardian
- GitHub Advanced Security
- GitLab
- Google Cloud Security Command Center
- Group-IB ASM
- HackerOne
- Harbor
- Have I Been Pwned
- Intigriti
- Intruder
- IriusRisk
- JFrog Xray
- Jira Service Management Assets
- Kubescape
- Mend
- Microsoft Defender
- Microsoft Defender for Cloud
- Nuclei (ProjectDiscovery Cloud)
- OpenVAS / Greenbone
- Probely
- Prowler
- Qualys
- Quay
- Rapid7 InsightAppSec
- Rapid7 InsightVM
- runZero
- Semgrep
- ServiceNow CMDB
- Shodan
- SonarQube
- Snyk
- Sonatype IQ
- Sysdig Secure
- Tenable
- Veracode
- Wazuh
- Wiz
- YesWeHack
For step-by-step setup instructions for each tool, see the Tool-Specific Connector Setup reference.
Most Connectors import findings. A few are Asset Connectors that import your asset inventory instead — building and maintaining your Product (Asset) and Product Type (Organization) hierarchy rather than importing findings: Azure DevOps, Backstage, Bitbucket, GitLab, Jira Service Management Assets, and ServiceNow CMDB. (runZero is primarily an Asset Connector, but can optionally import vulnerabilities as findings too.)
These Connectors provide an API-speed integration with DefectDojo, and can be used to automatically ingest and organize vulnerability data from the tool.
Finding your way around the Connectors page
Connectors are listed in two sections, each with a count beside its heading and each sorted alphabetically:
- Configured Connectors — every connector configuration that exists on this instance. A tool can appear several times, once per configuration, and each tile is titled
<Tool> - <label>so they can be told apart. Where several configurations share a tool, they are ordered by their label. - Available Connectors — every supported tool you have not configured yet.
The count next to a heading is the number of connectors currently shown, so it follows the search box and the Asset / Finding type filter rather than always reporting the total. On DefectDojo Pro Cloud, the Request Upstream Connector tile is not a connector and is not counted.
Both sections have their own search box, matching on the tool name.
The Downstream Connectors and Authorization Connectors pages are laid out the same way.
Connectors Quick-Start
If you’re using DefectDojo’s Auto-Map settings, you can have your first Connector up and running in no time.
- Set up a Connector from a supported tool.
- Discover your tool’s data hierarchy.
- Sync the vulnerabilities found with your tool into DefectDojo.
That’s all, really! And remember, even if you create your Connector the ’easy’ way, you can easily change the way things are set up later, without losing any of your work.
How Connectors Work
As long as you have the API key from the tool you’re trying to connect, a connector can be added in just a few minutes. Once the connection is working, DefectDojo will Discover your tool’s environment to see how you’re organizing your scan data.
Let’s say you have a BurpSuite tool, which is set up to scan five different repositories for vulnerabilities. Your Connector will take note of this organizational structure and set up Records to help you translate those separate repositories into DefectDojo’s Product / Engagement / Test hierarchy. If you have ‘Auto-Map Records’ enabled, DefectDojo will learn and copy that structure automatically.
Once your Record mappings are set up, DefectDojo will start importing scan data on a regular basis. You’ll be kept up to date on any new vulnerabilities detected by the tool, and you can start working with existing vulnerabilities immediately, using DefectDojo’s Findings system.
When you’re ready to add more tools to DefectDojo, you can easily rearrange your import mappings to something else. Multiple tools can be set up to import vulnerabilities to the same destination, and you can always reorganize your setup for a better fit without losing any work.
My Connector isn’t supported
Request a connector from the UI (DefectDojo Pro Cloud)
On DefectDojo Pro Cloud, you can ask our team to build a connector for a tool we don’t support yet — directly from the UI:
- Go to Connectors → Upstream Connectors (for tools that import data into DefectDojo). Issue-tracker and other outbound integrations can be requested the same way under Connectors → Downstream Connectors.
- In the Available Connectors section, click Request a Connector.
- Fill in the request form. Only the Tool / Product Name and Authentication Type are required; you can optionally add the vendor website, the tool’s API base URL, a link to its API docs, credentials for our team to evaluate against (stored securely), and a note describing your use case.
- Click Submit Request. You’ll see a confirmation that your request was received. Our team reviews each request to evaluate building support — submitting a request is not a guarantee that the connector will be built.
Requesting a connector requires global Maintainer permissions and is available on DefectDojo Pro Cloud only — the option does not appear on self-hosted (on-premise) instances.
Manual import
Even without a connector, DefectDojo can still handle manual import for a wide range of security tools. Please see our Supported Tool List, as well as our guide to Importing data.
Next Steps
- Check out the Connectors page by switching to DefectDojo’s Pro UI.
- Follow our guide to create your first Connector.
- Check out the process of Running Operations with your Connected security tools and see how they can be configured to import data.