Skip to content
| docs
Supported tools
DefectDojo Documentation
| docs
3.3.100 🌈 | changelog
English
English
Deutsch
Español
Français
日本語
Português (Brasil)
简体中文
Italiano
Search
/
Get Started
Import Data
Triage Findings
Connectors
Model Your Assets
Metrics & Reports
Sensei
Automation
Admin
Supported Tools
Open Source
Pro
Supported Tools
Using Generic Findings Import
Files
2ms (too many secrets)
42Crunch
AccuKnox
Action1
Acunetix Scanner
AIDE
Akto
Alert Logic
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
Ansible Lint
APKLeaks
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
Automox
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Beagle Security
Bearer CLI
BigID
Binwalk
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
bomber
Brakeman Scan
Bright Security
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
Calico Cloud Image Assurance
capa
CargoAudit Scan
cfn-lint
cfn-nag
CFRipper
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
chkrootkit
CISA ScubaGear
CISA ScubaGoggles
Clair Scan
ClamAV
Cloudflare Insights
CloudFormation Guard
Cloudsplaining
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codacy
Codechecker Report native
CodeQL
Composer Audit
Conftest
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Cppcheck
Crashtest Security
CredScan Report
CrowdStrike Falcon Spotlight
Crunch42 Scan
CSAF
cwe_checker
CyberArk Certificate Manager (Venafi)
Cyberwatch (Galeax)
CycloneDX
Cycognito
Dalfox
Datadog Cloud Security
DawnScanner
debsecan
Deepfence Threatmapper
DeepSource
Dependency Check
Dependency Track
Detect-secrets
Detectify
DevSkim
Dirsearch
docker-bench-security Scanner
dockerfile_lint
Dockle Report
Dodgy
Dotnet Vulnerable Packages
Dragos
DrHeader
DSOP Scan
Edgescan
Elastic Security CNVM
Elastic Security Detections
Elastic Security Posture
Endor Labs
Escape
ESLint
Fairwinds Insights
Falco
ffuf
Fickling
Finite State
firmwalker
Flawfinder
Fleet Policies
Fleet Vulnerabilities
Fortify
FOSSA
Garak (LLM vulnerability scanner)
Generic Findings Import
Ggshield
GitGuardian
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Gixy
Gobuster
Google Cloud Artifact Vulnerability Scan
Google Cloud Security Command Center
Gosec Scanner
Govulncheck
Grant
Group-IB ASM
GuardDog
HackerOne
HackerOne Cases
Hadolint
Halo Security
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
HiddenLayer
Holm Security
Horusec
httpx
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
Infer
Intigriti
Intruder
IntSights Report
Invicti
IriusRisk Threats Scan
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kingfisher
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
Klocwork
KrakenD Audit Scan
kube-bench Scanner
kube-no-trouble (kubent)
kube-score
Kubeaudit Scan
KubeEye
kubeHunter Scanner
KubeLinter
Kubescape Scanner
kubesec
Kyverno
Lacework (FortiCNAPP)
Legitify
licensecheck
Lynis
ManageEngine Vulnerability Manager Plus
Masscan
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
Microsoft Defender for Cloud
Mix Audit
MobSF Scanner
MobSF Scorecard Scanner
ModelScan
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Naabu
Nancy Scan
NetRise
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nightfall AI
Nikto
njsscan
Nmap
Node Security Platform
Noir
Nosey Parker
NowSecure
Nozomi Networks
NPM Audit
NPM Audit Version 7+
Nuclei
Open Pentest Format (OPF)
OpenReports
Openscap Vulnerability Scan
OpenSSF Scorecard
OpenVAS Parser
OpenVEX
Orca Security Alerts
ORT evaluated model Importer
OssIndex Devaudit
Ostorlab
OSV Scanner
Outpost24 Scan
OWASP Nettacker
OWASP Threat Dragon
Parasoft DTP
PHP Security Audit v2
PHP Symfony Security Checker
PHPStan
PICUS Scan
PingCastle
pip-audit Scan
pip-licenses
Pluto
PMapper
PMD Scan
pnpm Audit
Polaris
Popeye
Probely
Progpilot
Promptfoo (LLM eval & red-teaming)
Prospector
Prowler Scan
Psalm
PTART Reports
PWN Security Automation Framework
PyRIT
Python Taint
QARK
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys VMDR
Qualys Webapp Scan
Quark-Engine
Quay
Qwiet AI
Rapid7 InsightAppSec
Rapplex Scan
Red Hat Satellite
Regula
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
rkhunter
Rubocop Scan
Ruff
Rusty Hog parser
Safety
SARIF
sbomqs
Scantist Scan
ScoutSuite
Seal Security
Secretlint
Semgrep JSON Report
Semgrep Pro JSON Report
ShellCheck
SKF Scan
Slither
Snyk
Snyk Code
Snyk Issue API
Socket
Solar Appscreener Scan
SonarQube
Sonatype
SOOS
SPDX
SpotBugs
sqlmap
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Staticcheck
Syft
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tartufo
Tenable
terraform-compliance
Terrascan
Testssl Scan
TFLint
TFSec
Threagile
Threat Composer
Tracee
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Uptycs
uv audit
Vanta
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Vuls
Wallarm
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
WhatWeb
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Xygeni
YARA
Yarn Audit
YesWeHack
Zed Attack Proxy
Zimperium zScan
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
Supported Tools
🌐 Universal Parser
Using Generic Findings Import
Files
2ms (too many secrets)
42Crunch
AccuKnox
Action1
Acunetix Scanner
AIDE
Akto
Alert Logic
Anchore Enterprise Policy Check
Anchore Enterprise Vulnerability
Anchore Grype
AnchoreCTL Policies Report
AnchoreCTL Vuln Report
Ansible Lint
APKLeaks
AppCheck Web Application Scanner
AppSpider (Rapid7)
Aqua
Arachni Scanner
AuditJS (OSSIndex)
Automox
AWS Inspector2 Scanner
AWS Prowler Scanner
AWS Prowler V3
AWS Security Finding Format (ASFF)
AWS Security Hub
Azure Security Center Recommendations Scan
Bandit
Beagle Security
Bearer CLI
BigID
Binwalk
Blackduck Binary Analysis
Blackduck Component Risk
Blackduck Hub
bomber
Brakeman Scan
Bright Security
Bugcrowd
Bundler-Audit
Burp Dastardly
Burp REST API
Burp Suite DAST GraphQL
Burp Suite DAST Scan (formerly known as Burp Enterprise)
Burp XML
Calico Cloud Image Assurance
capa
CargoAudit Scan
cfn-lint
cfn-nag
CFRipper
Checkmarx
Checkmarx CxFlow SAST
Checkmarx One Scan
Checkov Report
Chef Inspect Log
chkrootkit
CISA ScubaGear
CISA ScubaGoggles
Clair Scan
ClamAV
Cloudflare Insights
CloudFormation Guard
Cloudsplaining
Cloudsploit (AquaSecurity)
Cobalt.io Scan
Codacy
Codechecker Report native
CodeQL
Composer Audit
Conftest
Contrast Scanner
Coverity API
Coverity Scan JSON Report
Cppcheck
Crashtest Security
CredScan Report
CrowdStrike Falcon Spotlight
Crunch42 Scan
CSAF
cwe_checker
CyberArk Certificate Manager (Venafi)
Cyberwatch (Galeax)
CycloneDX
Cycognito
Dalfox
Datadog Cloud Security
DawnScanner
debsecan
Deepfence Threatmapper
DeepSource
Dependency Check
Dependency Track
Detect-secrets
Detectify
DevSkim
Dirsearch
docker-bench-security Scanner
dockerfile_lint
Dockle Report
Dodgy
Dotnet Vulnerable Packages
Dragos
DrHeader
DSOP Scan
Edgescan
Elastic Security CNVM
Elastic Security Detections
Elastic Security Posture
Endor Labs
Escape
ESLint
Fairwinds Insights
Falco
ffuf
Fickling
Finite State
firmwalker
Flawfinder
Fleet Policies
Fleet Vulnerabilities
Fortify
FOSSA
Garak (LLM vulnerability scanner)
Generic Findings Import
Ggshield
GitGuardian
Github SAST Scan
Github Secrets Detection Report
Github Vulnerability Scan
GitLab API Fuzzing Report Scan
GitLab Container Scan
GitLab DAST Report
GitLab Dependency Scanning Report
GitLab SAST Report
GitLab Secret Detection Report
Gitleaks
Gixy
Gobuster
Google Cloud Artifact Vulnerability Scan
Google Cloud Security Command Center
Gosec Scanner
Govulncheck
Grant
Group-IB ASM
GuardDog
HackerOne
HackerOne Cases
Hadolint
Halo Security
Harbor Vulnerability
HCL Appscan
HCL AppScan on Cloud SAST
HiddenLayer
Holm Security
Horusec
httpx
Humble Report
HuskyCI Report
Hydra
IBM AppScan DAST
Immuniweb Scan
Infer
Intigriti
Intruder
IntSights Report
Invicti
IriusRisk Threats Scan
JFrog Xray API Summary Artifact Scan
JFrog Xray On Demand Binary Scan
JFrog XRay Unified
JFrogXRay
KICS Scanner
Kingfisher
Kiuwan Scanner (SAST)
Kiuwan Scanner (SCA i.e. "Insights")
Klocwork
KrakenD Audit Scan
kube-bench Scanner
kube-no-trouble (kubent)
kube-score
Kubeaudit Scan
KubeEye
kubeHunter Scanner
KubeLinter
Kubescape Scanner
kubesec
Kyverno
Lacework (FortiCNAPP)
Legitify
licensecheck
Lynis
ManageEngine Vulnerability Manager Plus
Masscan
Mayhem SARIF Reports
Mend Scan
Meterian Scanner
Microfocus Webinspect Scanner
Microsoft Defender for Cloud
Mix Audit
MobSF Scanner
MobSF Scorecard Scanner
ModelScan
Mozilla Observatory Scanner
MS Defender Parser
n0s1 Scanner
Naabu
Nancy Scan
NetRise
Netsparker
NeuVector (compliance)
NeuVector (REST)
Nexpose XML 2.0 (Rapid7)
Nightfall AI
Nikto
njsscan
Nmap
Node Security Platform
Noir
Nosey Parker
NowSecure
Nozomi Networks
NPM Audit
NPM Audit Version 7+
Nuclei
Open Pentest Format (OPF)
OpenReports
Openscap Vulnerability Scan
OpenSSF Scorecard
OpenVAS Parser
OpenVEX
Orca Security Alerts
ORT evaluated model Importer
OssIndex Devaudit
Ostorlab
OSV Scanner
Outpost24 Scan
OWASP Nettacker
OWASP Threat Dragon
Parasoft DTP
PHP Security Audit v2
PHP Symfony Security Checker
PHPStan
PICUS Scan
PingCastle
pip-audit Scan
pip-licenses
Pluto
PMapper
PMD Scan
pnpm Audit
Polaris
Popeye
Probely
Progpilot
Promptfoo (LLM eval & red-teaming)
Prospector
Prowler Scan
Psalm
PTART Reports
PWN Security Automation Framework
PyRIT
Python Taint
QARK
Qualys Hacker Guardian Scan
Qualys Infrastructure Scan (WebGUI XML)
Qualys Scan
Qualys VMDR
Qualys Webapp Scan
Quark-Engine
Quay
Qwiet AI
Rapid7 InsightAppSec
Rapplex Scan
Red Hat Satellite
Regula
Retire.js
ReversingLabs Spectra Assure
Risk Recon API Importer
rkhunter
Rubocop Scan
Ruff
Rusty Hog parser
Safety
SARIF
sbomqs
Scantist Scan
ScoutSuite
Seal Security
Secretlint
Semgrep JSON Report
Semgrep Pro JSON Report
ShellCheck
SKF Scan
Slither
Snyk
Snyk Code
Snyk Issue API
Socket
Solar Appscreener Scan
SonarQube
Sonatype
SOOS
SPDX
SpotBugs
sqlmap
SSH Audit
SSL Labs
Sslscan
Sslyze Scan
StackHawk HawkScan
Staticcheck
Syft
Sysdig Vulnerability Reports
Sysdig Vulnerability Reports
Talisman
Tartufo
Tenable
terraform-compliance
Terrascan
Testssl Scan
TFLint
TFSec
Threagile
Threat Composer
Tracee
Trivy
Trivy Operator
Trufflehog
Trufflehog3
Trustwave
Trustwave Fusion API Scan
Twistlock
Uptycs
uv audit
Vanta
Veracode
Veracode SourceClear
Visual Code Grepper (VCG)
Vuls
Wallarm
Wapiti Scan
Wazuh Scanner
Wfuzz JSON importer
WhatWeb
Whispers
WhiteHat Sentinel
Wiz Scanner Parser
Wiz-cli Dir Scanner
Wiz-cli IaC Scanner
Wiz-cli Img Scanner
Wpscan Scanner
Xanitizer
Xeol Parser
Xygeni
YARA
Yarn Audit
YesWeHack
Zed Attack Proxy
Zimperium zScan
Zora Parser
API Pull
Blackduck API
Bugcrowd API
Cobalt.io API Import
Edgescan
SonarQube API Import
Vulners
On this page
Sample Scan Data
Home
Supported tools
Supported Tools
Files
Zora Parser
Zora Parser
On this page
Sample Scan Data
Zora scan results can be exported from the
Zora platform
Sample Scan Data
#
Zora scans can be found
here
.
Prev
Zimperium zScan
Top
