Skip to content
| docs
Supported tools
DefectDojo Documentation
| docs
3.2.100 🌈 | changelog
Search
/
Get Started
Import Data
Triage Findings
Connectors
Model Your Assets
Metrics & Reports
Sensei
Automation
Admin
Supported Tools
Open Source
Pro
Supported Tools
Using Generic Findings Import
Files
Acunetix Scanner
AIDE
Alert Logic
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
APKLeaks
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Bearer CLI
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
Brakeman Scan
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
CargoAudit Scan
cfn-lint
cfn-nag
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
chkrootkit
Clair Scan
ClamAV
Cloudflare Insights
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codechecker Report native
CodeQL
Composer Audit
Conftest
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Cppcheck
Crashtest Security
CredScan Report
Crunch42 Scan
CSAF
cwe_checker
Cyberwatch (Galeax)
CycloneDX
Cycognito
DawnScanner
Deepfence Threatmapper
Dependency Check
Dependency Track
Detect-secrets
DevSkim
Dirsearch
docker-bench-security Scanner
Dockle Report
Dotnet Vulnerable Packages
DrHeader
DSOP Scan
Edgescan
ESLint
ffuf
firmwalker
Flawfinder
Fortify
Garak (LLM vulnerability scanner)
Generic Findings Import
Ggshield
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Gobuster
Google Cloud Artifact Vulnerability Scan
Gosec Scanner
Govulncheck
HackerOne Cases
Hadolint
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
Horusec
httpx
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
Infer
IntSights Report
Invicti
IriusRisk Threats Scan
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
KrakenD Audit Scan
kube-bench Scanner
Kubeaudit Scan
kubeHunter Scanner
KubeLinter
Kubescape Scanner
Legitify
Lynis
Masscan
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
Mix Audit
MobSF Scanner
MobSF Scorecard Scanner
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Naabu
Nancy Scan
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nikto
njsscan
Nmap
Node Security Platform
Nosey Parker
NPM Audit
NPM Audit Version 7+
Nuclei
OpenReports
Openscap Vulnerability Scan
OpenVAS Parser
OpenVEX
Orca Security Alerts
ORT evaluated model Importer
OssIndex Devaudit
OSV Scanner
Outpost24 Scan
OWASP Nettacker
PHP Security Audit v2
PHP Symfony Security Checker
PICUS Scan
PingCastle
pip-audit Scan
PMD Scan
pnpm Audit
Polaris
Popeye
Progpilot
Promptfoo (LLM eval & red-teaming)
Prowler Scan
PTART Reports
PWN Security Automation Framework
QARK
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys VMDR
Qualys Webapp Scan
Rapplex Scan
Red Hat Satellite
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
rkhunter
Rubocop Scan
Rusty Hog parser
SARIF
Scantist Scan
ScoutSuite
Secretlint
Semgrep JSON Report
Semgrep Pro JSON Report
SKF Scan
Snyk
Snyk Code
Snyk Issue API
Solar Appscreener Scan
SonarQube
Sonatype
SPDX
SpotBugs
sqlmap
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tenable
Terrascan
Testssl Scan
TFSec
Threagile
Threat Composer
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
WhatWeb
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Xygeni
YARA
Yarn Audit
Zed Attack Proxy
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
Supported Tools
🌐 Universal Parser
Using Generic Findings Import
Files
Acunetix Scanner
AIDE
Alert Logic
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
APKLeaks
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Bearer CLI
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
Brakeman Scan
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
CargoAudit Scan
cfn-lint
cfn-nag
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
chkrootkit
Clair Scan
ClamAV
Cloudflare Insights
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codechecker Report native
CodeQL
Composer Audit
Conftest
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Cppcheck
Crashtest Security
CredScan Report
Crunch42 Scan
CSAF
cwe_checker
Cyberwatch (Galeax)
CycloneDX
Cycognito
DawnScanner
Deepfence Threatmapper
Dependency Check
Dependency Track
Detect-secrets
DevSkim
Dirsearch
docker-bench-security Scanner
Dockle Report
Dotnet Vulnerable Packages
DrHeader
DSOP Scan
Edgescan
ESLint
ffuf
firmwalker
Flawfinder
Fortify
Garak (LLM vulnerability scanner)
Generic Findings Import
Ggshield
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Gobuster
Google Cloud Artifact Vulnerability Scan
Gosec Scanner
Govulncheck
HackerOne Cases
Hadolint
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
Horusec
httpx
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
Infer
IntSights Report
Invicti
IriusRisk Threats Scan
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
KrakenD Audit Scan
kube-bench Scanner
Kubeaudit Scan
kubeHunter Scanner
KubeLinter
Kubescape Scanner
Legitify
Lynis
Masscan
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
Mix Audit
MobSF Scanner
MobSF Scorecard Scanner
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Naabu
Nancy Scan
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nikto
njsscan
Nmap
Node Security Platform
Nosey Parker
NPM Audit
NPM Audit Version 7+
Nuclei
OpenReports
Openscap Vulnerability Scan
OpenVAS Parser
OpenVEX
Orca Security Alerts
ORT evaluated model Importer
OssIndex Devaudit
OSV Scanner
Outpost24 Scan
OWASP Nettacker
PHP Security Audit v2
PHP Symfony Security Checker
PICUS Scan
PingCastle
pip-audit Scan
PMD Scan
pnpm Audit
Polaris
Popeye
Progpilot
Promptfoo (LLM eval & red-teaming)
Prowler Scan
PTART Reports
PWN Security Automation Framework
QARK
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys VMDR
Qualys Webapp Scan
Rapplex Scan
Red Hat Satellite
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
rkhunter
Rubocop Scan
Rusty Hog parser
SARIF
Scantist Scan
ScoutSuite
Secretlint
Semgrep JSON Report
Semgrep Pro JSON Report
SKF Scan
Snyk
Snyk Code
Snyk Issue API
Solar Appscreener Scan
SonarQube
Sonatype
SPDX
SpotBugs
sqlmap
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tenable
Terrascan
Testssl Scan
TFSec
Threagile
Threat Composer
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
WhatWeb
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Xygeni
YARA
Yarn Audit
Zed Attack Proxy
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
On this page
Sample Scan Data
Home
Supported tools
Supported Tools
Files
Zora Parser
Zora Parser
On this page
Sample Scan Data
Zora scan results can be exported from the
Zora platform
Sample Scan Data
#
Zora scans can be found
here
.
Prev
Zed Attack Proxy
Top
