Pro Metrics on DefectDojo Documentation

Pro Metrics Overview

Mon, 01 Jan 0001 00:00:00 +0000

The DefectDojo Pro UI has various Metrics dashboards to help visualize your current security posture. Open them from Overview > Insights in the sidebar. Each dashboard allows stakeholders at different levels of the organization to make informed decisions without needing to interpret raw data or navigate individual Findings. These dashboards include:

Executive Insights

Mon, 01 Jan 0001 00:00:00 +0000

The Executive Insights metrics page provides an aggregated view of application security risk across your organization. As it is design for executive-level consumption, this dashboard focuses exclusively on Organizations and Assets, emphasizing trends and outcomes rather than individual Findings.

Priority Insights

Mon, 01 Jan 0001 00:00:00 +0000

The Priority Insights metrics page shows the most critical Findings as determined by Risk, Severity, Exploitability, or custom scoring, helping teams understand which vulnerabilities pose the greatest threat at any given moment and focus their efforts accordingly.

Program Insights

Mon, 01 Jan 0001 00:00:00 +0000

The Program Insights metrics page evaluates the effectiveness and maturity of the application security program as a whole, focusing on program-level performance rather than individual Findings.

Remediation Insights

Mon, 01 Jan 0001 00:00:00 +0000

The Remediation Insights dashboard focuses on closure performance and remediation accountability, charting SLA adherence, overdue Findings, and Risk Acceptance over time. It relies on EPSS scores to determine a Finding’s exploitability, the database for which DefectDojo Pro updates daily and applies to each of your Findings.

Tool Insights

Mon, 01 Jan 0001 00:00:00 +0000

Tool Insights tracks the performance of each security tool used in DefectDojo based on the count and severity of Findings that it reports, helping to evaluate the comparative effectiveness of tools over time.