Supported tools
DefectDojo Documentation
| docs
2.55.3 🌈 |
Release Notes
Search docs
YouTube
Linkedin
X
GitHub
Get started ⏷
Import data ⏷
Triage Findings ⏷
Model your assets ⏷
Metrics & reports ⏷
Automation ⏷
Issue tracking ⏷
Admin ⏷
Supported tools ⏷
DefectDojo Version
DefectDojo Open Source
DefectDojo Pro
Supported Tools
🌐 Universal Parser (Pro)
Using Generic Findings Import
Files
Acunetix Scanner
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Bearer CLI
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
Brakeman Scan
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
CargoAudit Scan
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
Clair Scan
Cloudflare Insights
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codechecker Report native
CodeQL
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Crashtest Security
CredScan Report
Crunch42 Scan
Cyberwatch (Galeax)
CycloneDX
Cycognito
DawnScanner
Deepfence Threatmapper
Dependency Check
Dependency Track
Detect-secrets
docker-bench-security Scanner
Dockle Report
DrHeader
DSOP Scan
Edgescan
ESLint
Fortify
Generic Findings Import
Ggshield
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Google Cloud Artifact Vulnerability Scan
Gosec Scanner
Govulncheck
HackerOne Cases
Hadolint
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
Horusec
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
IntSights Report
Invicti
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
KrakenD Audit Scan
kube-bench Scanner
Kubeaudit Scan
kubeHunter Scanner
Kubescape Scanner
Legitify
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
MobSF Scanner
MobSF Scorecard Scanner
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Nancy Scan
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nikto
Nmap
Node Security Platform
Nosey Parker
NPM Audit
NPM Audit Version 7+
Nuclei
OpenReports
Openscap Vulnerability Scan
OpenVAS Parser
ORT evaluated model Importer
OssIndex Devaudit
OSV Scanner
Outpost24 Scan
PHP Security Audit v2
PHP Symfony Security Checker
PingCastle
pip-audit Scan
PMD Scan
Popeye
Progpilot
Prowler Scan
PTART Reports
PWN Security Automation Framework
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys Webapp Scan
Rapplex Scan
Red Hat Satellite
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
Rubocop Scan
Rusty Hog parser
SARIF
Scantist Scan
ScoutSuite
Semgrep JSON Report
Semgrep Pro JSON Report
SKF Scan
Snyk
Snyk Code
Snyk Issue API
Solar Appscreener Scan
SonarQube
Sonatype
SpotBugs
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tenable
Terrascan
Testssl Scan
TFSec
Threagile
Threat Composer
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Yarn Audit
Zed Attack Proxy
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
Supported Tools
🌐 Universal Parser (Pro)
Using Generic Findings Import
Files
Acunetix Scanner
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Bearer CLI
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
Brakeman Scan
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
CargoAudit Scan
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
Clair Scan
Cloudflare Insights
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codechecker Report native
CodeQL
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Crashtest Security
CredScan Report
Crunch42 Scan
Cyberwatch (Galeax)
CycloneDX
Cycognito
DawnScanner
Deepfence Threatmapper
Dependency Check
Dependency Track
Detect-secrets
docker-bench-security Scanner
Dockle Report
DrHeader
DSOP Scan
Edgescan
ESLint
Fortify
Generic Findings Import
Ggshield
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Google Cloud Artifact Vulnerability Scan
Gosec Scanner
Govulncheck
HackerOne Cases
Hadolint
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
Horusec
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
IntSights Report
Invicti
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
KrakenD Audit Scan
kube-bench Scanner
Kubeaudit Scan
kubeHunter Scanner
Kubescape Scanner
Legitify
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
MobSF Scanner
MobSF Scorecard Scanner
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Nancy Scan
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nikto
Nmap
Node Security Platform
Nosey Parker
NPM Audit
NPM Audit Version 7+
Nuclei
OpenReports
Openscap Vulnerability Scan
OpenVAS Parser
ORT evaluated model Importer
OssIndex Devaudit
OSV Scanner
Outpost24 Scan
PHP Security Audit v2
PHP Symfony Security Checker
PingCastle
pip-audit Scan
PMD Scan
Popeye
Progpilot
Prowler Scan
PTART Reports
PWN Security Automation Framework
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys Webapp Scan
Rapplex Scan
Red Hat Satellite
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
Rubocop Scan
Rusty Hog parser
SARIF
Scantist Scan
ScoutSuite
Semgrep JSON Report
Semgrep Pro JSON Report
SKF Scan
Snyk
Snyk Code
Snyk Issue API
Solar Appscreener Scan
SonarQube
Sonatype
SpotBugs
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tenable
Terrascan
Testssl Scan
TFSec
Threagile
Threat Composer
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Yarn Audit
Zed Attack Proxy
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
On this page
Sample Scan Data
PingCastle
On this page
Sample Scan Data
Import results from the
PingCastle
.
Sample Scan Data
#
Sample PingCastle scans can be found
here
.
Prev
PHP Symfony Security Checker
Next
pip-audit Scan
