Working with scan results

DefectDojo visualises findings, tracks them, gathers statistics, creates reports and integrates with issue trackers. Scanner results that are exported there are read and processed in DefectDojo rather than in ScanSuite.

Opening the results

In ScanSuite, click the Product Name:

You will be redirected to the DefectDojo instance. The first time, you will need to log in with the DefectDojo credentials — see Set up DefectDojo for how to retrieve them.

Once logged in, the Product → Engagement view opens directly from the ScanSuite reference, so you do not need to search for it inside DefectDojo:

Reading the findings

The engagement contains all successful scan exports, with the option to view a consolidated list of findings or the findings from each individual scan.

Click any finding for its details. These vary by scanner, but most provide the affected file and line number for static findings, the URL for dynamic ones, and further detail in the Description and Mitigation sections.

Exporting

Findings can be exported as HTML or CSV:

The HTML report presents all finding details in a scrollable form, which is often a better way to work through results than clicking each one individually.

Issue trackers

DefectDojo provides its own Jira integration for pushing findings into a remediation workflow. That is configured inside DefectDojo, not in ScanSuite.

To learn more about DefectDojo's functionality, settings and troubleshooting, refer to the official documentation.