OWASP DefectDojo
8.0#1 in devsecops platforms$100 usage-basedFree planWebAPILinuxSelf-hosted
VisitOWASP DefectDojo vs UpGuard
What both publish
| Fact | OWASP DefectDojo | UpGuard |
|---|---|---|
| Integrations | The vendor lists more than 500 supported security tools, including SAST, DAST, SCA, cloud, container, modeling, and ticketing systems. | Native integrations include Jira Cloud, Slack and ServiceNow, while Zapier connects UpGuard with more than 4,000 applications. |
| Rating on G2 | 4.6 out of 5 from 11 reviews | 4.5 out of 5 from 802 reviews |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 4 reviews | 4.6 out of 5 from 243 reviews |
| SDKs | The DefectDojo GitHub organization publishes a Python API library named defectdojo_api and a Go installer named godojo. | UpGuard documents curl, jq, Python Requests and Postman usage, but the reviewed pages do not identify an official SDK package. |
| Security compliance | DefectDojo states that it maintains a SOC 2 Type 2 attestation and aligns its trust program with GDPR and the EU Cyber Resilience Act. | UpGuard states that its security program aligns with ISO/IEC 27001 and that it is SOC 2 Type II compliant with annual attestation. |
| Support | Community users are directed to GitHub, Slack, and forums, while Pro subscriptions include unlimited support tickets and dedicated engineering attention. | The pricing comparison lists Standard Support in Standard, Professional, and Corporate, and Premium Assurance in Enterprise and Enterprise+. |
OWASP DefectDojo plans
- Community EditionFree
- Pay As You Go$100 a month
- Pro Pay As You Go$100 a month
- Pre-Pay & Save—
- Pro Pre-Pay—
UpGuard plans
- FreeFree
- Standard$1,750 a month
- CorporatePriced on request
- EnterprisePriced on request
- Enterprise+Priced on request
- ProfessionalPriced on request
Pick OWASP DefectDojo if…
DefectDojo suits security teams that need to aggregate scanner results, track remediation, and connect findings to ticketing systems. It also offers governance and risk-prioritization tools for organizations using Pro.
Pick UpGuard if…
You want what its maker publishes above — check its page for the details.