Skip to content
Draft
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -208,6 +208,24 @@ Only Bitbucket Cloud (bitbucket.org) is supported. Bitbucket Server reached end

Each repository becomes a Record named after the repository, grouped by its Bitbucket **project**.

## **Bright Security**

The Bright Security connector uses the [Bright](https://brightsec.com) (formerly NeuraLegion) API to import **DAST findings**. DefectDojo discovers every scan the token can access and creates a Record for each completed scan, then imports that scan's issues as findings.

#### Prerequisites

You will need a Bright **API key**, created in the Bright app under **User settings → API keys** (an `Org` or personal key). The key is sent in the `Authorization: Api-Key` header and is never logged.

#### Connector Mappings

1. Leave the **Location** field blank to use `https://app.brightsec.com`, or enter your Bright host explicitly.
2. Enter the Bright API key in the **Secret** field.
3. Optionally, set a **Minimum Severity** to limit which findings are imported.

DefectDojo maps each completed **scan** to a Record and each **issue** to a finding: the severity comes from Bright's own rating (Critical/High/Medium/Low), the CVSS score, CWE and remediation are carried over, the affected entry point becomes the endpoint, and the request/response evidence is included in the description. Findings are recorded as dynamic findings and de-duplicated on Bright's issue id.

See the [Bright API documentation](https://docs.brightsec.com/) for more information.

## **BurpSuite**

DefectDojo’s Burp connector calls Burp’s GraphQL API to fetch data.
Expand Down