You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/en/about_defectdojo/faq.md
+4Lines changed: 4 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -72,6 +72,10 @@ There are two different methods to import a single report from a security tool:
72
72
-**[Import](en/connecting_your_tools/import_scan_files/import_scan_ui/)** handles the report as a single point-in-time record. Importing a report creates a Test containing the resulting Findings.
73
73
-**[Reimport](/en/connecting_your_tools/import_scan_files/using_reimport/)** is used to update an existing Test with a new set of results. If you have a more open-ended approach to your testing process, you can continuously Reimport the latest version of your report to an existing Test. DefectDojo will compare the results of the incoming report to your existing data, record any changes, and then adjust the Findings in the Test to match the latest report.
74
74
75
+
To understand the difference, it’s helpful to think of Import as recording a single instance of a scan event, and Reimport as updating a continual record of scanning.
76
+
77
+
Here is an analogy; if you were an accountant, you could use Import to track a single receipt, while you would use Reimport to track a continuous ledger of expenses
78
+
75
79
Both methods also use Deduplication differently: while two discrete Imported Tests in the same Product will identify and label duplicate Findings separately, Reimport will not create any Findings it identifies as [duplicates](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/avoiding_duplicates_via_reimport/) within the Test.
76
80
77
81
Generally speaking, if a point-in-time report is what you need, Import is the best method to use. If you are continuously running and ingesting reports from a tool, Reimport is the better method for keeping things organized.
Copy file name to clipboardExpand all lines: docs/content/en/about_defectdojo/new_user_checklist.md
+25-9Lines changed: 25 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,22 +6,38 @@ weight: 3
6
6
chapter: true
7
7
---
8
8
9
-
Here's a quick reference you can use to ensure successful implementation - from a blank canvas to a fully functional app.
9
+
Here's a quick reference you can use to ensure successful implementation, from a blank canvas to a fully functional app.
10
10
11
-
### The Basics
11
+
The essence of DefectDojo is to import security data, organize it, and present it to the folks who need to know. Here are ways to achieve those things in DefectDojo Pro and Open-Source:
12
12
13
-
1. Start by [importing a file](/en/connecting_your_tools/import_scan_files/import_scan_ui) using the UI. This is generally the quickest way to see how your data fits into the DefectDojo model. (note: OS users will need to set up a Product Type and Product before they can import data)
13
+
### DefectDojo Pro
14
14
15
-
2. Now that you have data in DefectDojo, learn more about how to organize it with the [Product Hierarchy Overview](/en/working_with_findings/organizing_engagements_tests/product_hierarchy). The Product Hierarchy creates a working inventory of your apps, which helps you divide your data up into logical categories. These categories can be used to apply access control rules, or to segement your reports to the correct team.
15
+
1. Start by [importing a file](/en/connecting_your_tools/import_scan_files/import_scan_ui) using the UI. This is generally the quickest way to see how your data fits into the DefectDojo model.
16
16
17
-
3. Try [creating a Report](/en/share_your_findings/pro_reports/using_the_report_builder/) to summarize the data you've imported. Reports can be used to quickly share Findings with stakeholders such as Product Owners.
17
+
2. Now that you have data in DefectDojo, learn more about how to organize it with the [Product Hierarchy Overview](/en/working_with_findings/organizing_engagements_tests/product_hierarchy). The Product Hierarchy creates a working inventory of your apps, which helps you divide your data into logical categories, apply access control rules, sort Findings by [Priority and Risk](/en/working_with_findings/finding_priority/) or to segment your reports to the correct team.
18
18
19
-
This is the essence of DefectDojo - import security data, organize it, and present it to the folks who need to know.
19
+
3. Check out your [Metrics pages](/en/customize_dojo/dashboards/pro_dashboards/) which can be used to quickly share Finding reports with key stakeholders.
20
20
21
-
All of these features can be automated, and because DefectDojo can handle over 190 tools (at time of writing) you should be all set to create a functional security inventory of your entire organizational output.
21
+
### DefectDojo Open-Source
22
22
23
-
### Other guides
23
+
1. Open-Source users can start by creating their first [Product Type and Product]((/en/working_with_findings/organizing_engagements_tests/product_hierarchy)). Once those are created, they can [import a file](/en/connecting_your_tools/import_scan_files/import_scan_ui) to one of those Products using the UI.
24
24
25
+
2. Now that you have data in DefectDojo, consider expanding your Product layout [Product Hierarchy Overview](/en/working_with_findings/organizing_engagements_tests/product_hierarchy). The Product Hierarchy creates a working inventory of your apps, which helps you divide your data up into logical categories. These categories can be used to apply access control rules, or to segment your reports to the correct team.
26
+
27
+
3. Use the [Report Builder](/en/share_your_findings/pro_reports/using_the_report_builder/#opening-the-report-builder) to summarize the data you've imported. Reports can be used to quickly share Findings with stakeholders such as Product Owners.
28
+
29
+
This is the essence of DefectDojo - import security data, organize it, and present it to the folks who need to know.
30
+
31
+
All of these features can be automated, and because DefectDojo can handle over 200 tools (at time of writing) you should be all set to create a functional security inventory of your entire organizational output.
32
+
33
+
## Other guides
34
+
35
+
### Pro Features
36
+
- If your organization uses ServiceNow, AzureDevops, GitHub or GitLab for issue tracking, check out our [documentation](/en/share_your_findings/integrations/) on those integrations.
37
+
- Customize your [main Dashboard](/en/customize_dojo/dashboards/introduction_dashboard/) with filtered tiles to view your environment at a glance.
38
+
- Learn how to rapidly import data and mirror your team's existing security environment with [Connectors](/en/connecting_your_tools/connectors/about_connectors/).
39
+
40
+
### Open-Source Features
25
41
- Does your organization use Jira? Learn how to use our [Jira integration](/en/share_your_findings/jira_guide/) to create Jira tickets from the data you ingest.
26
42
- Are you expecting to share DefectDojo with many users in your organization? Check out our guides to [user management](/en/customize_dojo/user_management/about_perms_and_roles/) and set up role-based access control (RBAC).
27
-
- Ready to dive into automation? Learn how to use the [DefectDojo API](/en/connecting_your_tools/import_scan_files/api_pipeline_modelling) to automatically import new data, and build a robust CI / CD pipeline.
43
+
- Ready to dive into automation? Learn how to use the [DefectDojo API](/en/connecting_your_tools/import_scan_files/api_pipeline_modelling) to automatically import new data, and build a robust CI/CD pipeline.
Copy file name to clipboardExpand all lines: docs/content/en/about_defectdojo/pro_features.md
+41-11Lines changed: 41 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,47 +7,69 @@ chapter: true
7
7
exclude_search: true
8
8
---
9
9
10
-
DefectDojo Pro comes with many additional features. Here is list of those features, along with links to documentation to see them in action:
10
+
Here is a list of DefectDojo Pro’s many additional features, along with links to documentation to see them in action:
11
11
12
12
## Improved UX
13
13
14
14
### Pro UI
15
-
DefectDojo's UI has been reworked in DefectDojo Pro to be faster, more functional, and to be better at navigating through enterprise-level data volume. It also includes a dark mode.
15
+
16
+
DefectDojo's UI has been reworked in DefectDojo Pro to be faster, more functional, fully customizable, and better at navigating through enterprise-level data volume. It also includes a dark mode.
16
17
See our [Pro UI Guide](../ui_pro_vs_os) for more information.
DefectDojo Pro can pre-triage your Findings by Priority and Risk, allowing your team to identify and fix your most critical issues first.
22
24
See our [Finding Priority Guide](/en/working_with_findings/finding_priority/) for more details.
23
25
24
26
### Rules Engine
25
-
DefectDojo Pro's Rules Engine allows you to set up a script of automated bulk actions - no programming experience required.
26
-
Build custom workflows and bulk actions to handle Findings and other objects.
27
+
28
+
DefectDojo Pro's Rules Engine allows you to script automated bulk actions and build custom workflows to handle Findings and other objects, no programming experience required.
29
+
27
30
See our [Rules Engine Guide](/en/customize_dojo/rules_engine) for more info.
28
31
29
32
30
33
31
34
### Pro Dashboards and Reporting
32
-
Generate [instant reports and metrics](../ui_pro_vs_os/#new-dashboards) to share the security posture of your apps and repos. Evaluate your security tools and your team's performance in addressing security issues.
35
+
36
+
Generate [instant reports and metrics](../ui_pro_vs_os/#new-dashboards) to share the security posture of your apps and repos, evaluate your security tools and analyze your team's performance in addressing security issues.
37
+
38
+
The graphics on the landing page can be exported as SVG files, and the data used to create the graphics can also be exported as a table.
39
+
40
+
Additionally, DefectDojo Pro includes several new [insights dashboards](/en/about_defectdojo/ui_pro_vs_os/#new-dashboards), offering enhanced metrics for various audiences of your security program.
33
41
34
42
### Deduplication Tuning
35
-
Fine-tune how DefectDojo identifies and manages duplicate findings with advanced deduplication settings. Adjust same-tool, **cross-tool**, and reimport deduplication for precision matching between all your chosen security tools and vulnerability findings.
43
+
44
+
Advanced Deduplication settings allow you to fine-tune how DefectDojo identifies and manages duplicate findings. Adjust same-tool, **cross-tool**, and reimport Deduplication for precision matching between all your chosen security tools and vulnerability findings.
45
+
36
46
See our [Deduplication Tuning Guide](/en/working_with_findings/finding_deduplication/tune_deduplication/) for more information.
37
47
38
48
39
49
40
50
## Streamlined import
41
51
52
+
### More Import Options
53
+
54
+
DefectDojo Pro includes four additional import methods: [Universal Importer](/en/connecting_your_tools/external_tools/), [API Connectors](/en/connecting_your_tools/connectors/about_connectors/), [Universal Parser](/supported_tools/parsers/universal_parser/), and [Smart Upload](/en/connecting_your_tools/import_scan_files/smart_upload/).
55
+
56
+
57
+
58
+
42
59
### Background Imports
60
+
43
61
For enterprise-level reports, DefectDojo Pro offers an optimized upload method which processes Findings in the background.
44
62
45
63
### CLI Tools
46
-
Quickly build a command-line pipeline to import, reimport, and export data to your DefectDojo Pro instance using our Universal Importer and DefectDojo CLI apps. These tools are maintained by the DefectDojo Pro team and can be run in Windows, Macintosh, or Linux environments.
64
+
65
+
Quickly build a command-line pipeline to import, reimport, and export data to your DefectDojo Pro instance using our Universal Importer and DefectDojo-CLI apps; no API scripting necessary (available for Windows, Macintosh, or Linux).
66
+
47
67
See our [External Tools Guide](/en/connecting_your_tools/external_tools/) for more information.
48
68
49
69
### Connectors
50
-
DefectDojo can instantly connect to supported tools to import new Finding data - get an automated Import pipeline working out-of-the-box, without the need to set up any API calls or cron jobs.
70
+
71
+
DefectDojo can instantly connect to enterprise-level scanning tools to import new Finding data, creating an automated Import pipeline that works out-of-the-box without the need to set up any API calls or cron jobs.
72
+
51
73
See our [Connectors Guide](/en/connecting_your_tools/connectors/about_connectors/) for more information.
52
74
53
75
@@ -66,10 +88,18 @@ Supported tools for Connectors include:
66
88
* Tenable
67
89
* Wiz
68
90
69
-
### Universal Parser
70
-
Are you using an unsupported or customized scanning tool? Or do you just wish DefectDojo handled a report slightly differently?
91
+
### Universal Parser (Beta)
92
+
93
+
If you’re using an unsupported/customized scanning tool, or just wish that DefectDojo handled a report slightly differently, use DefectDojo Pro's Universal Parser to turn any .json or .csv report into an actionable set of Findings. Your parser will parse and map the data however you like.
71
94
72
-
Use DefectDojo Pro's Universal Parser to turn any .json or .csv report into an actionable set of Findings, and have DefectDojo parse the data however you like.
73
95
See our [Universal Parser Guide](/en/connecting_your_tools/universal_parser/) for more information.
74
96
75
97
98
+
99
+
## Support
100
+
101
+
DefectDojo Pro subscriptions include world-class support for both on-premise and Cloud installations. Our team is available to help your organization implement and maximize your use of DefectDojo Pro. Your subscription includes:
102
+
103
+
-**Comprehensive Support**: Unlimited support tickets and seats are available to assist your entire team.
104
+
-**Dedicated Engineering Focus**: User-reported issues, bugs, and feature requests receive priority attention from our engineering team.
105
+
-**SaaS Management**: We provide monitoring, maintenance, and backups for all SaaS instances.
Copy file name to clipboardExpand all lines: docs/content/en/about_defectdojo/request_a_trial.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,11 +6,11 @@ weight: 6
6
6
pro-feature: true
7
7
---
8
8
9
-
If your team requires an on\-premise DefectDojo installation, please connect with our Sales team by emailing \-\>[info@defectdojo.com](mailto:info@defectdojo.com) . This trial setup process only applies to DefectDojo Cloud users.
9
+
If your team requires an on-premise DefectDojo installation, please connect with our Sales team by emailing → [hello@defectdojo.com](mailto:hello@defectdojo.com) . This trial setup process only applies to DefectDojo Cloud users.
10
10
11
-
All DefectDojo plans include a free 2\-week trial, which you can use to evaluate our software. DefectDojo Trial instances are fully\-featured and can be immediately converted to our team into paid instances \- no need to set everything up again, or reupload any data when your trial period ends.
11
+
All DefectDojo plans include a free 2-week trial, which you can use to evaluate our software. DefectDojo Trial instances are fully-featured and can be immediately converted into paid instances by our team; no need to set everything up again, or reupload any data when your trial period ends.
12
12
13
-
At the end of this process, you'll be put in touch with our Sales team, who will follow up to receive your billing information, and authorize and set up your company's trial instance.
13
+
At the end of this process, you'll be put in touch with our Sales team who will follow up to receive your billing information and authorize your company's trial instance.
14
14
15
15
# **Requesting your Trial**
16
16
@@ -29,7 +29,7 @@ Enter your company's **Name** and the **Server Label** you want to use with Defe
29
29
30
30
31
31
32
-
Normally, DefectDojo will name your domain according to your Company Name., but if you select "Use Server Label in Domain", DefectDojo will instead label your domain according to the Server Label you chose. This approach may be preferred if you plan to use multiple DefectDojo instances (such as a Production instance and a Test instance, for example). Please contact our Sales team \-\>[info@defectdojo.com](mailto:info@defectdojo.com) if you require multiple instances.
32
+
Normally, DefectDojo will name your domain according to your company name, but if you select "Use Server Label in Domain" DefectDojo will instead label your domain according to the Server Label you chose. This approach may be preferred if you plan to use multiple DefectDojo instances (such as a Production instance and a Test instance, for example). Please contact our Sales team → [hello@defectdojo.com](mailto:hello@defectdojo.com) if you require multiple instances.
33
33
34
34
## Step 3: Select a Server Location
35
35
@@ -43,11 +43,11 @@ Enter the IP address ranges, subnet mask and labels that you want to allow to ac
43
43
44
44
45
45
46
-
If you want to use external services with DefectDojo (GitHub or JIRA), check the appropriate boxes listed under **Select External Services.**
46
+
If you want to use external services with DefectDojo (e.g., GitHub or JIRA), check the appropriate boxes listed under **Select External Services.**
47
47
48
48
## Step 5: Confirm your Plan type and Billing Frequency
49
49
50
-
Before you complete the process, please confirm the plan you want to use along with your billing frequency \-monthly or annually.
50
+
Before you complete the process, please confirm the plan you want to use along with your billing frequency (monthly or annually).
51
51
52
52
53
53
@@ -60,8 +60,8 @@ We'll prompt you to look over your request one more time. Once submitted, only F
60
60
After reviewing and accepting DefectDojo's License and Support Agreement, you can click **Checkout With Stripe** or **Contact Sales**.
61
61
62
62
* Checkout With Stripe will take you to a Stripe page where you can enter your billing information.
63
-
* If you do not wish to enter your billing info at this time, you can click Contact Sales - our Sales team will be in touch to set up your trial.
63
+
* If you do not wish to enter your billing info at this time, you can click Contact Sales, and our Sales team will be in touch to help you finalize your trial subscription.
64
64
65
65
# Once your trial has been approved
66
66
67
-
Our Support team will send you a Welcome email with links and an initial password to access your DefectDojo instance. You can always reach out to [support@defectdojo.com](mailto:support@defectdojo.com) for product assistance once your trial begins.
67
+
Our Support team will send you a Welcome email with links and an initial password to access your DefectDojo instance. You can always reach out to [support@defectdojo.com](mailto:support@defectdojo.com) for DefectDojo Pro assistance once your trial begins.
0 commit comments