Alternatives to DefectDojo
An open source, self-hosted vulnerability management platform that collects and tracks findings from security scanners. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
DefectDojo
An open source, self-hosted vulnerability management platform that collects and tracks findings from security scanners.
Replacements
Listings that take over the same core job as DefectDojo.
Dependency-Track
Track component risk using software bills of materials.
Dependency-Track is a free self-hosted platform that tracks risk from software bills of materials, so it covers component vulnerabilities rather than findings imported from many scanners.
Similar software
Related functionality, not a direct replacement.
OpenVAS
Full-featured open-source vulnerability scanner.
Nessus
Widely used commercial vulnerability scanner.
Trivy
Scan software and infrastructure for known security issues.
Grype
Find known vulnerabilities in container images and filesystems.
Semgrep
Find code patterns and potential problems with static analysis.
Nuclei
A fast vulnerability scanner driven by YAML templates contributed by thousands of security researchers.
