OWASP Flagship Projects - OWASP DefectDojo

Explore the OWASP DefectDojo Flagship Project in this informative conference talk presented by Matt Tesauro and Aaron Weaver. Discover the evolution of vulnerability management from Excel spreadsheets to Google Sheets, and learn how DefectDojo addresses these challenges. Gain insights into the project's inception, key features, and its ability to handle various tools and automation processes. Understand the implementation of APSec Pipeline and Kafka Pipeline for event-driven statistics. Examine deployment options including Docker and Kubernetes, and learn about the project's scalability through a case study of a large education company. Get a glimpse of upcoming improvements, including the new authorization model. Dive into the thriving DefectDojo community, exploring core contributors, commit rates, and growth trends. Conclude with a live demonstration showcasing the platform's capabilities in action.

Intro
Who am I
Breaking two boards
Excel
Google Sheets
About DefectDojo
What DefectDojo does well
When did DefectDojo start
Features of DefectDojo
Tools
Automation
Automation with tooling
APSec Pipeline
Kafka Pipeline
Event Driven Stats
Large Education Company
Deployment Options
Docker
Kubernetes
Massive Installation
Godojo
Upcoming Improvements
Authorization Model
Community
Core Contributors
Commit Rates
Growth
Help
Community Contributions
Demo