Training: Introduction to Parsers

Training: Introduction to Parsers

DefectDojo supports over 250 integrations with security tools, making it one of the most flexible vulnerability aggregation platforms available. Scans from SAST, SCA, DAST, IaC, and other security scanners can be imported into DefectDojo and de-duplicated in bulk.

But importing and de-duplicating findings in DefectDojo isn’t all that can be done and customized.

In this training session, we'll walk through the following:

• What parsers are and how DefectDojo uses them to normalize findings from security tools
• The difference between manual UI imports, API-based imports, and Pro-only methods like Connectors, Universal Importer and Smart Upload
• How to import your own findings without needing a parser via the Universal Parser
• How to tune deduplication, data fidelity, and downstream reporting

Speaker

Matt Tesauro
CTO & Co-Founder
DefectDojo