DefectDojo

DefectDojo is a DevSecOps, application security posture management and vulnerability management tool. It orchestrates end-to-end security testing, tracks vulnerabilities, removes duplicate findings, supports remediation work and produces reports, giving security teams one place to see what scanners across the pipeline have found.

A simple way to try it is uploading sample scan reports, and the project provides Docker Compose instructions for a quick start plus public demo environments for both the commercial Pro edition and the OWASP Community Edition, which reset daily and should not hold sensitive data. Repository topics include vulnerability correlation, security automation and orchestration. It is built with Python and Django and can be deployed on Kubernetes.

The community edition is licensed under BSD-3-Clause and is run on your own infrastructure, while the vendor sells a Pro edition with additional features. It suits AppSec and product security teams consolidating results from many scanners.