May Office Hours: Spring Roadmap

DefectDojo Office Hours: DefectDojo V3 UI Modernization & Pro Updates for Vulnerability Management This episode covers major updates across DefectDojo, with a focus on Pro features and key open source changes. The team previews DefectDojo V3, a ground-up UI modernization of the open source edition that replaces the aging Bootstrap framework, improves responsiveness, and reorganizes filters; it’s currently in the dev branch and targeted for a June 1 release, with guidance to avoid production use initially, plus downgrade compatibility and side-by-side V2/V3 interfaces. They also note planned API improvements (including simplifying import vs re-import) and changes to open source vs Pro, including not supporting SSO and RBAC in open source V3 and introducing a free Pro option for small organizations. Pro updates include fully customizable dashboards, a revamped report builder, the new Locations structure (evolving endpoints/components and improving SBOM support and deduplication), a PSIRT advisory engine that ingests and prioritizes threat advisories against SBOM data, and a managed AppSec offering that can automate tool selection, scanning, reporting in DefectDojo, and optional auto-remediation with human oversight. Community updates include participation at AppSec Vienna with a DefectDojo track. 00:00 Welcome And Agenda 00:42 Defect Dojo V3 Goals 01:08 UI Rebuild And Bootstrap 02:20 Deployment And API Changes 04:03 Release Plan And Compatibility 05:12 Open Source RBAC Shift 05:58 V3 Interface Demo 08:18 Pro Custom Dashboards 09:57 Report Builder Revamp 11:44 Locations Product Hierarchy 16:13 PSIRT Advisory Engine 18:44 Managed AppSec Offering 21:00 Community Events And Q&A