Findings

Decide which AI components are authorized where, and turn unauthorized ones into Findings

Check every Claude Code prompt and tool call against a central policy: block personal data, redact secrets, stop risky commands, and review the activity

Upload screenshots, reports, or other supporting files to a Finding, Engagement, or Test in DefectDojo OS

Upload screenshots, reports, or other supporting files to a Finding, Engagement, or Test in DefectDojo Pro

Apply metadata changes, tags, notes, and review to many Findings at once in the DefectDojo Pro UI

Track vulnerability information without using a scan tool

Change a Finding’s Status, or add more metadata as you resolve an issue

Export findings and engagements as CSV or Excel

A quick reference to Finding status: Open, Verified, Accepted..

The main workflow and vulnerability tracking system of DefectDojo

Walk a Findings list one Finding at a time from the keyboard, with a note for each decision, in DefectDojo Pro

Standardize how Findings should be remediated with reusable, centrally managed Mitigation Policies

Request a review from specific people, claim a review so others know it is being handled, and control who is eligible to be asked

Leveraging Risk Acceptances in DefectDojo OS

Leveraging Risk Acceptances in DefectDojo Pro