Get started
Get Started With DefectDojo
Get Started With DefectDojo
DefectDojo FAQ
Working with different UIs in DefectDojo
List of Pro Features in DefectDojo
Expand the storage available for uploaded files on a Docker Compose deployment without altering the deployment itself
How to amend the documentation
The four things to capture, where each one lives for Compose and Kubernetes deployments, and how to confirm a backup can actually be restored
Use dojo-compose-cli doctor and the certs commands to find what stops a Docker Compose deployment from starting, upgrading, or reaching a service behind an internal CA
How DefectDojo Cloud is deployed and isolated on Google Kubernetes Engine.
Use Cases and examples
DefectDojo is highly configurable.
Reconnect to your DefectDojo Instance
How to contribute to parsers
Install DefectDojo Pro on Kubernetes using the Helm chart, covering infrastructure, secrets, and the install itself
Upgrade a self-hosted DefectDojo Pro deployment that runs on Docker Compose with dojo-compose-cli
Upgrade an existing DefectDojo Pro Helm release, including pulling the chart, running the upgrade, and rolling back
What is specific to OpenShift when deploying self-hosted DefectDojo Pro: security context constraints, Routes, and ReadWriteMany storage
The outbound IP addresses DefectDojo Cloud connects from, for allowlisting in your external firewalls.
Deploy DefectDojo Pro with FIPS 140-3 validated cryptography using the -fips container images, for FedRAMP SC-13 and similar requirements
Running DefectDojo Pro FIPS images on Amazon ECS with the Fargate launch type
General guidance for sizing compute, memory, and storage for a self-hosted DefectDojo Pro deployment
DefectDojo supports various installation options.
Stage the DefectDojo Pro install artifacts on a host with internet access, then move them into an air-gapped network
Install self-hosted DefectDojo Pro on a single host using dojo-compose-cli, with PostgreSQL on a separate server
Use dojo-helm-cli to pull the DefectDojo Pro Helm chart and images, validate a cluster, deploy, and collect diagnostics
Step-by-step OSS to Pro migration on Kubernetes, a troubleshooting index keyed on the exact error text, and a post-migration verification checklist
Move your open source DefectDojo data into a DefectDojo Cloud instance
Move your open source DefectDojo database and media files into a self-hosted DefectDojo Pro deployment
There is DefectDojo demo site running the latest officially released version
How we create releases
Run self-hosted DefectDojo Pro against a managed PostgreSQL server that refuses passwords, using Microsoft Entra ID, Amazon RDS IAM or Cloud SQL IAM authentication
Questions to settle before deploying self-hosted DefectDojo Pro on a private network, such as Amazon EKS in AWS GovCloud with FIPS images, mirrored images, managed PostgreSQL and Redis, and SSO
How often self-hosted DefectDojo Pro is released, which release is supported, and where to report scan results or a vulnerability in DefectDojo
Bring a backed-up DefectDojo Pro deployment back on the same host or a new one: configuration and keys, both databases, uploaded files, and the same pinned version, for Docker Compose and Kubernetes
Stop a self-hosted DefectDojo Pro instance from calling DefectDojo or any third-party feed when it has no route off its network
Configure DefectDojo Pro on-prem to reach Jira, SonarQube, and Connectors through an outbound HTTPS proxy
For use in Production environments, performance tweaks and backups are recommended.
Turn on the DefectDojo Pro sandbox on a self-hosted instance with one setting, and what it creates in your database
The self-hosted deployment models for DefectDojo Pro (Docker Compose and Kubernetes), what you need before you start, and how the rest of this section fits
Add a test, dev, or other DefectDojo instance to your account
What a self-hosted DefectDojo Pro instance sends to DefectDojo support by default, how to opt in, and how the cloud portal secret is treated
The DefectDojo platform consists of several components that work together closely.
Supported upgrade procedure for self-hosted DefectDojo Pro, on both the Helm chart and Docker Compose
Why a large scan file fails to upload on Docker Compose, and which limit to raise
Why a large scan file fails to upload on Kubernetes, and which limit to raise in the Helm chart
Manage your subscription and account settings
Check the signature on a DefectDojo Pro container image and pull its SPDX and CycloneDX SBOMs, including from a mirrored registry with no internet access