--- title: DefectDojo Reviews meta_title: 'DefectDojo Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 11 reviews by the users' company size, role or industry to find out how DefectDojo works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 11 scale: '5' date_modified: '2026-10-01' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # DefectDojo Reviews **Vendor:** DefectDojo **Category:** [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner) **Average Rating:** 4.6/5.0 **Total Reviews:** 11 **AI Enabled:** This product embeds AI to enhance or extend its core functionality. ## About DefectDojo DefectDojo unifies and automates vulnerability management, enabling security teams to focus on strategic, data-driven analysis. We help teams reduce time spent on manual tracking and consolidate vulnerabilities from existing tools for seamless vulnerability management. ## DefectDojo Reviews ### 1. DefectDojo: Ultimate Vulnerability Management Solution **Rating:** 4.5/5.0 stars **Reviewed by:** Anjali A. | Offensive security Analyst , Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** July 22, 2024 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about DefectDojo?** Defectdojo has all the Possible features which is needed for Vulnerability Management. if you want to showcase the test which is done in last month you can showcase that with easy matric. **What do you dislike about DefectDojo?** Enterprise version is too slow if i upload large file /. **What problems is DefectDojo solving and how is that benefiting you?** Defectdojo is majorlly helping with me is manage monthly vulnerability . if previous month vulnerability not in present month so it will be automatically closed in current month. ### 2. A pertinacious and authentic platform for security programs in the organization **Rating:** 4.5/5.0 stars **Reviewed by:** Henry E. | Systems Analyst, Information Technology and Services, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 16, 2024 **What do you like best about DefectDojo?** The product has a very simple user interface that enables most users to easily navigate around without any hardship or challenge as it is a straightforward tool to most beginners. The software integration with Jira has a huge impact hence it enhances productivity. The software has a very great source vulnerability management tool and because of this, I would recommend it to all the users. **What do you dislike about DefectDojo?** I can't give five stars to the platform as it has poor customer support that doesn’t respond and solve customers' issues as supposed to be as it is an open-source solution. **What problems is DefectDojo solving and how is that benefiting you?** The platform is best as it puts together many scan reports in one single platform. The product enables security engineers to spend less time when logging in vulnerability it is achieved by the platform having a vulnerability testing system. The fact that DefectDojo has an open-source model of vulnerability management makes it reduce all the huge costs of solution. ### 3. An industrious and dependable platform for security and vulnerability management **Rating:** 4.5/5.0 stars **Reviewed by:** Marilena S. | Software Engineer , Staffing and Recruiting, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 11, 2024 **What do you like best about DefectDojo?** DefectDojo is a straightforward platform hence any user can use it effortlessly with any difficulty when using it. The product helps its users to be always updated as it provides them with notifications via Slack or email. The product has integration features hence it integrates with other reporting tools increasing productivity. **What do you dislike about DefectDojo?** There is not much to dislike about the product but customer support is not prioritized as the support team could take days to solve customer’s issues. **What problems is DefectDojo solving and how is that benefiting you?** Defectdojo with the right SLA and stakeholders helps in managing the identified vulnerabilities. The product has helped most of the security experts to spend less time logging vulnerabilities. The product favors its users as it is easy to use, manage, and easy to set up hence great for all beginners as it is effortless to mavigate. ### 4. Free to use vulnerability management tool **Rating:** 4.0/5.0 stars **Reviewed by:** Divi N. | software developer, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** March 14, 2024 **What do you like best about DefectDojo?** -Since its opensourced its free to use -Supports importing reports from lots of other tools - Easy to integrate with other tools -SSO supported -Easy to install **What do you dislike about DefectDojo?** -They are removing features from opensource version and putting them into paid version -UI is bit finicky **What problems is DefectDojo solving and how is that benefiting you?** DefectDojo in my opinion was one of the best VM tool. I have used it for my multiple projects, its very easy to have multiple projects and project under same account and get statuses from all the projects at once. DefectDojo also has REST APIs hence it is very easy to integrate with other services. ### 5. DefectDojo is the best Open-source Vulnerability Management Tool! **Rating:** 4.0/5.0 stars **Reviewed by:** R V. | Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 19, 2023 **What do you like best about DefectDojo?** If you are looking for a good open source vulnerability management tool, than this is it. It can be integrated with different VAPT scanner reports and the complete lifecycle management can be done for the Vulnerabilites identified. **What do you dislike about DefectDojo?** It should also have APIs available that can be easily integrated with certain SIEM tools. **What problems is DefectDojo solving and how is that benefiting you?** DefectDojo is providing an open-source model of Vulnerability Management tool and it reduces the cost of the solution. ### 6. Opensource Secops tool **Rating:** 4.5/5.0 stars **Reviewed by:** Dhaval D. | software engineer, Small-Business (50 or fewer emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 29, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about DefectDojo?** Free to use, Very powerful vulnerability management tool, very structured REST APIs, and easy to integrate with other reporting tools. **What do you dislike about DefectDojo?** Nothing much I can think of at the moment. But I have had trouble sometimes when deploying, like dependency errors at the first time installing. **What problems is DefectDojo solving and how is that benefiting you?** Very powerful tool used by the VAPT team. we're mainly using this tool with Caldera. Caldera does the vulnerability assessment and we pushed reports generated by Caldera to DefectDojo. ### 7. DefectDojo Review **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** December 15, 2021 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about DefectDojo?** Easy to use, easy to set up, easy to manage, best vulnerability management tool. **What do you dislike about DefectDojo?** The integration of Least Direct tools and the automatic import scan result are not present. **Recommendations to others considering DefectDojo:** Best tool to use for vulnerability management and easy to set up. Easy to use. **What problems is DefectDojo solving and how is that benefiting you?** Scan the in-house server for vulnerability management and import those results into other tools. ### 8. Best Open Source Vulnerability Management Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Satykam A. | Red Team Director, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 15, 2021 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about DefectDojo?** Ease of use, opensource, developed by OWASP team, compatible with lots of security scanners **What do you dislike about DefectDojo?** very less tools are supported with direct console integration, we have to manually import the scan files **Recommendations to others considering DefectDojo:** for the quick setup and running defectdojo use docker based installation **What problems is DefectDojo solving and how is that benefiting you?** Vulnerability Management, De-duplications of vulnerabilities, Single console to track all the vulnerabilities and status ### 9. One of the best application security vulnerability management tool ever seen. **Rating:** 5.0/5.0 stars **Reviewed by:** Trilok A. | Security Consultant, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** March 01, 2022 **What do you like best about DefectDojo?** DefectDojo's main purpose is to cut down on the time security professionals spend logging vulnerabilities. DefectDojo achieves this by providing a vulnerability templating system, imports for popular vulnerability scanners, report production, and metrics. **What do you dislike about DefectDojo?** not find any unusual. haven't found any bug yet. **Recommendations to others considering DefectDojo:** A nice and very useful tool for application vulnerability management. **What problems is DefectDojo solving and how is that benefiting you?** DefectDojo's main purpose is to help security experts spend less time logging vulnerabilities. DefectDojo does this by providing a vulnerability templating system, vulnerability scanner imports, report production, and metrics. ### 10. DefectDojo Review **Rating:** 5.0/5.0 stars **Reviewed by:** Elyes C. | Application Security Engineer, Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 23, 2021 **What do you like best about DefectDojo?** The most positive side is that there is a dockerized solution for Defectdojo. On another side, the fact that you can integrate it with Jira is a huge plus. I also appreciate the notifications via Slack and email. **What do you dislike about DefectDojo?** The fact that DefectDojo is an open-source solution, there is no part for customer support. Sometimes it takes you days to solve an issue. **What problems is DefectDojo solving and how is that benefiting you?** We are integrating too many scan reports in one single platform. ### 11. Defect Dojo Vulnerability Management **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 23, 2021 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about DefectDojo?** Integration with multiple third-party tools **What do you dislike about DefectDojo?** Proper documentation not provided for few of tools **What problems is DefectDojo solving and how is that benefiting you?** Vulnerabilities identified can be managed using Defect Dojo with proper SLA and Stakeholder ## DefectDojo Discussions - [What is DefectDojo used for?](https://www.g2.com/discussions/what-is-defectdojo-used-for) - [View DefectDojo pricing details and edition comparison](https://www.g2.com/products/defectdojo/reviews?section=pricing&secure%5Bexpires_at%5D=2026-10-03+05%3A00%3A09+-0500&secure%5Bsession_id%5D=5fdbab76-ac26-49f5-8a4e-e5b23cfa558d&secure%5Btoken%5D=f20b75d925e9297599235980c3093fc57acb0420f97e358bb15da950545c49ae&format=llm_user) ## DefectDojo Features **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans - Anomaly/Malware Detection **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Risk management - Application Security Posture Management (ASPM)** - Vulnerability Management - Risk Assessment and Prioritization - Compliance Management - Policy Enforcement **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring - Vulnerability Scanning - Source-Code Scanning - Web Scanning **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Integration and efficiency - Application Security Posture Management (ASPM)** - Integration with Development Tools - Automation and Efficiency **Security** - Data Security - Data loss Prevention - Security Auditing - Real-Time Data - Cloud Application Security - SSL Security **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing - Risk Analysis **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Reporting and Analytics - Application Security Posture Management (ASPM)** - Trend Analysis - Risk Scoring - Customizable Dashboards **Identity** - SSO - Governance - User Analytics - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Agentic AI - Application Security Posture Management (ASPM)** - Autonomous Task Execution - Multi-step Planning **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security - Runtime Container Security - Asset Discovery - Threat Intelligence - Vulnerability Protection - Alerts/Notifications - Vulnerability/Threat Prioritization - Generative AI - SQL Injections - Real-Time Analytics - Threat Protection - Web-Application Security - Password Protection - Website Crawling - Vulnerability Assessment ## Top DefectDojo Alternatives - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) - 4.5/5.0 (298 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) - 4.5/5.0 (136 reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - 4.7/5.0 (313 reviews)