DefectDojo launched Threat Modeling in Beta for DefectDojo Pro, allowing teams to turn feature design into a reviewed threat model before a single line of code exists.

DefectDojo is the open source unified vulnerability management platform that remediates at the speed of AI. Built by practitioners to end security finding sprawl, DefectDojo aggregates findings from more than 500 security tools into a single system of action, then automatically deduplicates, enriches, and prioritizes them so teams remediate real risk instead of drowning in noise. Sensei, DefectDojo's AI, closes the loop from detection to remediation by scanning repositories and opening pull requests that fix vulnerabilities without leaving the platform. Security teams use DefectDojo to automate triage, enforce SLAs, and report on security posture and compliance across frameworks including SOC 2, PCI-DSS, and the EU Cyber Resilience Act. Born from the OWASP community, DefectDojo is trusted by organizations of every size, from individual practitioners running the free Community Edition to enterprises deploying DefectDojo Pro in the cloud, on-premises, or in air-gapped environments. Learn more at defectdojo.com.