DefectDojo integration
Send Konvu's triaged findings to DefectDojo with exploitability evidence.
Integration details
Primary category
AppSec Posture Management
Sync direction
DefectDojo ↔ Konvu
Findings are ingested from DefectDojo into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to DefectDojo.
Status
Coming soon
What is DefectDojo?
DefectDojo is an open-source vulnerability management platform that aggregates security tool output, deduplicates findings across scanners, tracks remediation metrics, and provides vulnerability lifecycle management.
Why connect DefectDojo to Konvu
- Konvu's triage layer adds exploitability analysis to DefectDojo's aggregated findings, clarifying which deduplicated vulnerabilities warrant action.
- Evidence trails enhance DefectDojo's metrics with proof of why findings were prioritized or dismissed for audit purposes.
- Combined workflow allows teams to use DefectDojo's deduplication while leveraging Konvu's deeper exploitability analysis.
How it works
Scan
DefectDojo produces findings from scans or assessments.
Ingest & enrich
Konvu ingests those findings and enriches them with code, configuration, and deployment context.
Assess exploitability
Konvu determines exploitability and recommended action with evidence attached.
Sync decisions
Based on your workflow, Konvu can push context, status updates, and severity adjustments back into DefectDojo.
Quick setup
When DefectDojo is available, you’ll configure it from the integrations list in Konvu.
- 1Go to /configuration/integrations in Konvu and choose DefectDojo.
- 2Authorize access and confirm the data sources you want to sync.
- 3Save the configuration to start syncing.
Sync direction
DefectDojo ↔ Konvu
Findings are ingested from DefectDojo into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to DefectDojo.
Join the waitlist
We’ll let you know when the DefectDojo integration is ready. Leave your email to get updates.
More integrations
View all
Apiiro
Layer exploitability evidence onto Apiiro's risk-based code-to-cloud findings.
ArmorCode
Enrich ArmorCode's aggregated findings with Konvu's exploitability analysis.
Cycode
Augment Cycode's pipeline and posture findings with exploitability analysis.
JupiterOne
Connect JupiterOne asset relationships with Konvu's vulnerability exploitability analysis.
Black Duck
Add exploit evidence to Black Duck's component risk and license compliance findings.
Checkmarx
Focus Checkmarx SAST and SCA alerts on code paths with demonstrated exploit potential.