https://beta-docs.defectdojo.com/get_started/pro/onprem/Recent content in 🔸 DefectDojo Pro (On-Premise) on DefectDojo DocumentationHugoenCopyright (c) 2020-2025 DefectDojo, Inc.Wed, 28 Oct 2026 20:38:10 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/installation_options/Tue, 02 Feb 2021 20:46:29 +0100https://beta-docs.defectdojo.com/get_started/pro/onprem/installation_options/<p>DefectDojo Pro can be fully self-hosted in your own environment, giving you control over your infrastructure, data, and security posture. It suits organizations with compliance, data residency, or internal security requirements that rule out a hosted deployment, and it delivers the same capabilities as the cloud-hosted product.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/hardware_sizing/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/hardware_sizing/<p>Sizing a DefectDojo deployment comes down to two questions. How much data are you holding, and how many people are working in it at once. This page gives starting points for both.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/private_deployment/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/private_deployment/<p>This page collects the decisions to make before a self-hosted deployment on a private network: a Kubernetes cluster with no internet egress, images mirrored into your own registry, managed data services, and often FIPS 140-3 cryptography. The examples use Amazon EKS (including AWS GovCloud), RDS and ElastiCache, but the same answers apply on other platforms. Each section links to the page with the full procedure.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/migrating_from_open_source/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/migrating_from_open_source/<p>This page describes how to move the data from an open source DefectDojo instance into a self-hosted DefectDojo Pro deployment.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/backing_up/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/backing_up/<p>A deployment is more than its database. A backup that captures only the database restores into a system that runs but is missing uploaded files and cannot decrypt the connection credentials that are stored encrypted. This page covers what to capture, where each piece lives, and how to confirm the result is restorable.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/restoring/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/restoring/<p>This page is the other half of <a href="https://beta-docs.defectdojo.com/get_started/pro/onprem/backing_up/">Backing Up a Self-Hosted Deployment</a>. It walks through putting a deployment back from those backups, onto the host it came from or onto a new one.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/upgrading/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/upgrading/<p>This page describes the supported upgrade procedure for self-hosted DefectDojo Pro. It applies to both deployment methods; the detailed, method-specific steps live on their own pages:</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/forward_proxy/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/forward_proxy/<p>If your DefectDojo Pro on-prem deployment cannot make direct outbound connections to the internet — for example, because firewall rules require all egress to go through a forward HTTPS proxy — you can configure the standard <code>HTTPS_PROXY</code>, <code>HTTP_PROXY</code>, and <code>NO_PROXY</code> environment variables. DefectDojo will route its outbound calls through the proxy accordingly.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/fips_mode/Mon, 27 Jul 2026 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/fips_mode/<p>DefectDojo Pro can be deployed with FIPS 140-3 validated cryptography, for environments subject to FedRAMP control <strong>SC-13</strong> or similar requirements.</p>https://beta-docs.defectdojo.com/get_started/pro/onprem/fips_on_ecs_fargate/Mon, 01 Jan 0001 00:00:00 +0000https://beta-docs.defectdojo.com/get_started/pro/onprem/fips_on_ecs_fargate/<p>This page covers running the DefectDojo Pro FIPS images on Amazon ECS with the Fargate launch type. For what FIPS mode is, what the images cover, and the behaviour differences that apply to every deployment, see <a href="https://beta-docs.defectdojo.com/get_started/pro/onprem/fips_mode/">FIPS 140-3 Mode</a>.</p>