# DefectDojo

[DefectDojo](< https://www.defectdojo.org/>) is a security tool that automates application security vulnerability management. DefectDojo streamlines the application security testing process by offering features such as importing third party security findings, merging and de-duping, integration with Jira, templating, report generation and security metrics.

DefectDojo supports Meterian security findings in the JSON format. Generate one by adding the following parameter to the Meterian client: `--report-json=/tmp/report.json`

Once generated, reports can be imported as **Engagements** Findings to any of your **Products**: from the Product overview menu click on **Findings** and select "Import Scan Results"&#x20;

![](/files/-Mcyzkqiq89tqRp9_FGY)

Or alternatively for existing **Engagements,** from the **Tests** tab menu select "Import Scan Results"

![](/files/-Mcz0hs_gTb0boi0cNnk)

Furthermore, imports could also happen through the dedicated [DefectDojo APIs](https://defectdojo.github.io/django-DefectDojo/integrations/api-v2-docs/). We provide a [convenience script](https://raw.githubusercontent.com/MeterianHQ/django-DefectDojo/meterian-ci/api-sample-calls/ad-hoc-import.py) for automating the import process which is a direct implementation of these APIs and can be integrated as part of you CI/CD pipeline. Read on for a usage guide.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.meterian.io/management-platforms/defectdojo.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.