Approach 3 – security findings management DefectDojo

In this approach, we use several security testing tools to do security testing with XML outputs. These XML outputs will be imported into a defect management service, OWASP DefectDojo in our demonstration. The security defect management web service will help to consolidate all the testing results in one security dashboard, or even generate a summary report. Follow the steps to learn how to apply OWASP DefectDojo to manage your security findings.

Step 1 – setup the OWASP DefectDojo

To set up the OWASP DefectDojo, running the Docker image is suggested. Follow these commands to run OWASP DefectDojo. It will run a web service on port 8000:

$ docker run -it -p 8000...