Report Builder | DefectDojo Documentation

Report Builder

The Report Builder lets you turn DefectDojo data into polished, shareable reports — executive summaries, compliance snapshots, POA&M packages, engineering detail, and more — for audiences inside and outside your security team.

Open source vs. DefectDojo Pro

How you build reports depends on which edition you run:

Open Source DefectDojo Pro
Build a report Yes — assemble from widgets Yes — compose from reusable Blocks
Run and retrieve output Yes (HTML, print-to-PDF) Yes (saved PDF or HTML)
Save reusable Themes / Blocks / Templates No — rebuild each time Yes
Persisted history of generated reports No Yes — list, download, re-run
REST API + LLM automation Yes — full create → run → download

In short: open source lets you build a report, run it, and export the result, but does not save templates or keep a report history. DefectDojo Pro turns reporting into reusable, brandable building blocks that you can drive from the UI, the REST API, or an LLM.

Where to go next

DefectDojo Pro

Open Source