Set up DefectDojo
Connect ScanSuite to a DefectDojo instance for vulnerability management.
1. Retrieve the DefectDojo admin password
cd ~/apps/scansuite/defectdojo && ./dojo-password
If you do not see the password, try again in a minute — it takes a while for DefectDojo to set it up. If the password still does not come up, change it by pressing y and setting a new one.
The password is removed after a DefectDojo restart. Write it down and store it somewhere safe.
2. Log in to DefectDojo
Open a browser and log in to DefectDojo at https://DOJO_HOST_IP:8443:
3. Copy the API key
Follow the /api/key-v2 path and copy the API key:
4. Connect ScanSuite to DefectDojo
Log in to ScanSuite at https://YOUR_HOST_IP:
To specify the DefectDojo connection details, go to the Settings menu:
Paste the DefectDojo host URL and API key, then click Save:
5. Verify the connection
Go to the Products tab and create a test product. If everything is set correctly, the new product will be created:
If product creation fails, the URL or the API key is usually the cause. See Troubleshooting.
Last reviewed 2026-08-15