Pricing - DefectDojo
Pricing
Simple and Transparent Pricing
DefectDojo is customer-first and our pricing model reflects that ethos. Clarity and value are at the heart of what we do. We believe that every company, regardless of size or budget, should have access to the best security tools. That's why we offer both open source and enterprise editions.
Dojo Pro
Get a custom quote
As security professionals, we feel per app/user pricing acts like ransomware, forcing security teams to try to find additional budget mid-cycle. This is why we offer a license model that gives customers more control over their license and spend.
DefectDojo’s pricing model is based on what you store for two reasons:
- You can cleanup data and always stay within license when necessary between budget cycles.
- It is the metric most closely associated with the cost to deliver services, as our auto-triage functions run over the entirety of your data.
Step 1 of 3
How many Findings do you have?*
- Less than 30,000
- Less than 50,000
- Less than 100,000
- More than 100,000
- Not Sure
What is considered a Finding?
A finding is what a security scanner or security tool reports. It can also be thought of as a ‘vulnerability’ or an ‘alert’. However, DefectDojo does utilize a number of consolidation machine-learning powered algorithms, so it isn’t uncommon for a tool to report 100 findings and DefectDojo turn that into 20 or less Dojo Findings.
Your Details
Please enter your name and work email below
What is your role?*
- Engineer
- Consultant or Reseller
- Security Professional
- Other
What is your Region?*
- North America
- South America
- Europe
- Middle East
- Africa
- Asia-Pacific
| #### DefectDojo Features | #### Free | #### Pro | ||
| Core finding import & deduplication | ||||
| REST API & Swagger UI | ||||
| Manual import & reimport | ||||
| Basic dashboard & reporting | ||||
| Role-based access control (RBAC) | ||||
| Authentication (username, LDAP, SAML, OAuth) | ||||
| Automation (Rules Engine) | ||||
| Tunable deduplication | ||||
| Background imports | ||||
| CLI & integrations (Snyk, SonarQube, AWS, etc.) | ||||
| Universal parser (CSV/JSON) | ||||
| Customizable dashboards & dark mode | ||||
| Cloud-hosted option | ||||
| Multi-factor authentication (MFA) | ||||
| Premium support & SLAs | ||||
| SOC & AppSec integration | ||||
| MCP integration | ||||
| Tenant isolation & encryption at rest |
Trusted by Top Organizations
.svg)
.svg)
.svg)
.svg)
.svg)