Scanning tools, technical testing, monitoring platforms and automated alerts have become common across many organisations and, as a result, most are now able to identify vulnerabilities. However, this has not translated into an equivalent reduction in the number of incidents. The problem rarely lies in the lack of…
Vulnerability management is far from being a new problem, but even so, it continues to be one of the weakest points in most organisations. There are numerous tools and alerts, but the number of exposed vulnerabilities continues to grow, and incidents continue to…
Introduction The purpose of this article is to highlight the role of DefectDojo [1] in vulnerability management, showcasing its effectiveness as a tool for streamlining security processes and its value for the developers, security auditor/penetration tester and managers. DefectDojo plays…