DefectDojo

Register: Building a Friction-free Release Cycle with RL & DefectDojo | ReversingLabs Ship faster without cutting corners. See how ReversingLabs and DefectDojo help security and engineering teams share a unified release pipeline.

Add this to your calendar: March 11, Matt Tesauro and ReversingLabs' Dave Ferguson are joining forces to teach a webinar on organizing joint pipelines for security and developers to create a truly friction-free release cycle.

Register now, because spots are limited: buff.ly/AZcprgg

🚨 Exciting News for the DefectDojo Community 🚨

We're officially launching our new Slack community, and for the first 50 people who sign up for the channel, we’ll be sending them exclusive swag!

Join us in our new home here: tinyurl.com/2w2rm4dt

February Office Hours: Getting Started with DefectDojo New to DefectDojo? Join this introductory webinar to learn how you can use DefectDojo to prioritize, deduplicate, and automate vulnerabilities, SOC alerts, and more. DefectDojo is an open‑source…

📅 One Week Reminder: Getting Started with DefectDojo Webinar

Featuring: Matt Tesauro, CTO and Co-Founder of DefectDojo

Date: February 18th at 12 PM ET / 9 AM PT

Don't miss this opportunity to transform how your team handles security findings.

👉 RSVP here: bit.ly/4raE7hR

February Office Hours: Getting Started with DefectDojo New to DefectDojo? Join this introductory webinar to learn how you can use DefectDojo to prioritize, deduplicate, and automate vulnerabilities, SOC alerts, and more. DefectDojo is an open‑source…

🚀 New to DefectDojo? Join Our Getting Started Webinar with DefectDojo Office Hours

Learn how DefectDojo can help you automate triage, prioritization, and vulnerability management in one unified platform.

When: February 18th at 12 PM ET / 9 AM PT

👉 Register now: bit.ly/4raE7hR

Your Data Is In—Now What? Best Practices to Refine, Route, and Report Security Data using DefectDojo Getting security scan data into a vulnerability management platform is just the beginning. The real value comes from what happens next: transforming raw scanner output into prioritized, actionable…

🚨 Tomorrow at 9 AM PT / 12 PM ET!

Last call to join Tracy Walker for "Your Data Is In—Now What? Best Practices to Refine, Route, and Report Security Data using DefectDojo"

Scanning and aggregating security findings is just the start- how do you make those findings more valuable?

bit.ly/3YXRtBA

Your Data Is In—Now What? Best Practices to Refine, Route, and Report Security Data using DefectDojo Getting security scan data into a vulnerability management platform is just the beginning. The real value comes from what happens next: transforming raw scanner output into prioritized, actionable…

⏰ One week out! Your last chance to secure a spot for our Office Hours. Here's the TLDR->

Now What? Best Practices to Refine, Route, and Report Security Data using DefectDojo

📆 January 29th | 9 AM PT / 12 PM ET

Link: bit.ly/3YXRtBA

Your Data Is In—Now What? Best Practices to Refine, Route, and Report Security Data using DefectDojo Getting security scan data into a vulnerability management platform is just the beginning. The real value comes from what happens next: transforming raw scanner output into prioritized, actionable…

🎯 Collecting vulnerability data ≠ Managing vulnerability risk

Now that your team has your security findings centralized, what do you do? Join us 📆 January 29th at 9 AM PT / 12 PM ET for best practices on how to take your security program to the next level.

Register: bit.ly/3YXRtBA

The Security Budget Crisis: How to Scale Defense When Resources Are Shrinking Security teams face a tough decision between rising tooling costs and the threat from AI-driven code growth. Learn how you can unify your vulnerability management and scale against threats with…

Cybersecurity is in the middle of a resource constraint crisis.

3 big problems, all combining to form the perfect storm.

1. Escalating tool costs

2. AI code exploding

3. Missing data to prove value

Read more in Greg's latest blog:

Read here: buff.ly/AXYjGbk

#Cybersecurity #AppSec

📊 You've got your security findings —but now what?

Join us for our January Office Hours on 📆 January 29th at 9 AM PT / 12 PM ET where Tracy Walker will share actionable strategies for turning raw vulnerability scan data into real security outcomes.

Register now: bit.ly/3YXRtBA

December Office Hours: A 2025 Recap for DefectDojo 2025 was a big year for the DefectDojo community! We released new updates to the platform, new integrations, and new advances in SOC prioritization & AI. We couldn’t be prouder of the DefectDojo…

⏰ Tomorrow! Final reminder for December Office Hours: A 2025 Recap for DefectDojo

Matt Tesauro is ready to share the highlights of 2025— new integrations, SOC prioritization advances, and AI innovations—plus exclusive previews of what's coming next.

🔗 Register now: buff.ly/wHZsszT

December Office Hours: A 2025 Recap for DefectDojo 2025 was a big year for the DefectDojo community! We released new updates to the platform, new integrations, and new advances in SOC prioritization & AI. We couldn’t be prouder of the DefectDojo…

📢 One week away! Join us for December Office Hours: A 2025 Recap for DefectDojo

Next Wednesday, December 11 at 12 PM ET / 9 AM PT, we're closing out the year with a celebration of everything the DefectDojo community accomplished in 2025.

🔗 Register now: buff.ly/wHZsszT

December Office Hours: A 2025 Recap for DefectDojo 2025 was a big year for the DefectDojo community! We released new updates to the platform, new integrations, and new advances in SOC prioritization & AI. We couldn’t be prouder of the DefectDojo…

What a year it's been for the DefectDojo community! From platform updates to groundbreaking advances in SOC prioritization and AI - 2025 has been packed with releases!

Join us on Dec 11 at 12 PM ET / 9 AM PT as we look recap 2025 for DefectDojo.

buff.ly/wHZsszT

How Trivy and DefectDojo Work Together: A Complete Security Integration Guide Learn how Trivy and DefectDojo integrate to enhance cloud-native security, offering comprehensive vulnerability detection and centralized management for your infrastructure.

ICYMI: we dropped a guide on integrating Trivy with DefectDojo a few weeks back. If you're scanning containers, K8s clusters, or IaC and want to centralize all those findings in one place, this one's for you.

Check it out: buff.ly/X3SwBfN

#CloudSecurity #DevSecOps #Trivy

November Office Hours: AI & AppSec: The Good, The Bad, The Ugly AI is poised to be the most disruptive technology in application security since the cloud, but separating the hype from the reality is critical. AI could also be the next DotCom bubble. This session…

⏰ Tomorrow at 9 AM PT / 12 PM ET

Our November Office Hours on AI & AppSec is happening in less than 24 hours, and we're not holding back.

If you're tired of AI hype and want straight talk about what's actually working in application security, this session is for you.

🔗 bit.ly/4929BRe

How Trivy and DefectDojo Work Together: A Complete Security Integration Guide

🔒 New Blog Post: How Trivy and DefectDojo Work Together

Trivy is one of the most popular IaC scanning tools and gets even better when used with DefectDojo

November Office Hours: AI & AppSec: The Good, The Bad, The Ugly AI is poised to be the most disruptive technology in application security since the cloud, but separating the hype from the reality is critical. AI could also be the next DotCom bubble. This session…

Join us for our Office Hours on 11/12 at 9 AM PT / 12 PM ET as we cut through the noise and get real about AI in application security.

Whether you're already knee-deep in AI vulnerability management or just curious, you'll walk away with actionable insights—not just buzzwords.

🔗 bit.ly/4929BRe

Join DefectDojo CEO & Co-Founder Greg Anderson at SANS Institute's Fall Cyber Fest on November 6th at 10:15 AM ET for a critical discussion on the intersection of AI and cybersecurity.

📅 November 6th | 10:15 AM ET | Virtual Event

buff.ly/tG3Qp2s

Streamlining Container Security: Anchore Enterprise Meets DefectDojo Pro

New Integration Alert: DefectDojo Pro + Enterprise

We're excited to share that DefectDojo Pro now integrates with Anchore Enterprise!

Check out our latest blog post to learn how to set it up and get started: bit.ly/4qMLFI3

October Office Hours: How Good Vulnerability Management Secures AI Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

⏰ Tomorrow: October Office Hours - How Good Vulnerability Management Secures AI

Final reminder! We're going live tomorrow, October 29th at 9 AM PT / 12 PM ET to discuss how a strong vulnerability management foundation can enable secure AI.

bit.ly/4hiOQCO

October Office Hours: How Good Vulnerability Management Secures AI Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

📢 One week reminder: October Office Hours on AI & Vulnerability Management

Join us next Wednesday, October 29th at 9 AM PT / 12 PM ET for a deep dive into securing AI through strong vulnerability management practices.

bit.ly/4hiOQCO

October Office Hours: How Good Vulnerability Management Secures AI Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

🔒 Join us for October Office Hours: How Good Vulnerability Management Secures AI

As organizations look to integrate AI into their security workflows, the foundation matters more than ever.

📅 Save your spot—October 29th at 9 AM PT / 12 PM ET

bit.ly/4hiOQCO

September Office Hours: New Integrations, AI Testing Tools, and Open Source Enhancements Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

🔥 Final reminder: September Office Hours is TOMORROW!

-You'll get a first look at our new integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure.

-Bring your thoughts & opinions on AI Testing tools.

-We'll walk through some of the latest DefectDojo Community edition.

bit.ly/4mlckYK

Your AI is drowning in tool chaos 🌊

Without MCP: different data formats, duplicate security findings, flooded context windows, wasted tokens, zero API understanding

With MCP: clean integration, unified data, smart connections ✨

Stop the tool overload. Start thinking protocols. 🤖

September Office Hours: New Integrations, AI Testing Tools, and Open Source Enhancements Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

⏰ One week reminder: September Office Hours is coming up!

Date: 9/30 at 12 PM ET / 9 AM PT

Here's the agenda:
🔗 New Platform Integrations
🤖 Your Voice in AI Development
👥 DefectDojo Community Updates

bit.ly/4mlckYK

September Office Hours: New Integrations, AI Testing Tools, and Open Source Enhancements Join us for our September Office Hours as we cover some of the exciting integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards) to accelerate remediation efforts for security…

🚀 Join us for our September Office Hours on 📆 September 30th!

What's on the agenda:
✅ New Integrations with ServiceNow, GitHub, GitLab, and Microsoft Azure (Azure Boards)

🤖 AI Testing Tools Discussion

🔧 DefectDojo Community Updates

bit.ly/4mlckYK

When it comes to vulnerability management, the numbers tell a sobering story about how quickly attackers move.

🔴 12% of zero-days are exploited within 24 hours of disclosure
🟠 29% are exploited within 1 week
🟡 56% are exploited within 1 month

Watch the full recording here- youtu.be/K2HYAK7o134

While top-tier engines like Cursor, OpenAI, Claude, and Gemini are getting remarkably good at writing clean, functional code, there's a concerning blind spot:

Security.

Watch the full recording of our interview with Jim Manico here: youtu.be/09K3Yv6DPqs

Beyond the Hype: Using DefectDojo’s MCP for 10X AI LLM Performance for Vulnerability Management AI. LLMs. Vibe Coding. Security teams are being bombarded with AI buzzwords while many are still manually triaging thousands of vulnerabilities. This session cuts through the noise to demonstrate a…

Tomorrow: DefectDojo's Model Context Protocol session with Tracy Walker.

If you're manually triaging vulnerabilities or your security AI projects aren't delivering results, this 45-minute session shows a working alternative.

Join here: bit.ly/41WLDlP

Beyond the Hype: Using DefectDojo’s MCP for 10X AI LLM Performance for Vulnerability Management AI. LLMs. Vibe Coding. Security teams are being bombarded with AI buzzwords while many are still manually triaging thousands of vulnerabilities. This session cuts through the noise to demonstrate a…

⚡ One week to go! Are you ready to transform your vulnerability management using the power of AI?

September 10th | 9 AM PT / 12 PM ET

The hardest part of security AI isn't the algorithms - it's the data foundation. Come see how DefectDojo already solved this.

🔗 bit.ly/41WLDlP

Thanks to the Codific team for a great write-up on how to implement Security Defect Tracking with #OWASP SAMM and DefectDojo.

buff.ly/Yq23Vdy