Wazuh Cloud x DefectDojo

[Diego Zacché]

Dear all,
good afternoon,
we have Wazuh in "cloud" and we saw that in the DefectDojo forum version 2.22 is already integrated into Wazuh. We would like to know if this integration already applies to Wazuh in Cloud?

PT-BR
Prezados, boa tarde, possuímos o Wazuh em "cloud" e vimos que no fórum do DefectDojo a versão 2.22 já está integrada ao Wazuh. Gostariamos de saber se está integração já se aplica ao Wazuh em Cloud?

https://github.com/DefectDojo/django-DefectDojo/releases

https://defectdojo.github.io/django-DefectDojo/integrations/parsers/file/wazuh/

[Mauricio Ruben Santillan]

Hello Diego,

For starters, since as you comment you're a Wazuh Cloud customer, I do recommend you to create a ticket in our Wazuh Support portal instead of posting in our Communities.

Now about your query, there's no Wazuh-official integration with DefectDojo. Still, you can integrate Wazuh with any external API by using Wazuh's integration module as shown here.

Anyways, by checking what DefectDojo does, it confuses me how you want to integrate Wazuh with DefectDojo. Are you attempting to send Wazuh alerts to it?

Looking forward to your comments.

[Diego Zacché]

Mauricio,
Good morning,
Our main goal is to manage server vulnerability using Wazuh in conjunction with DefectDojo.
In the Wazuh console we have our servers registered and a view of their vulnerabilities.
By integrating Wazuh with DefectDojo, we would be able to manage the vulnerabilities that have been corrected, those that are active, metrics, etc...
Briefly, Wazuh gives us the view of vulnerabilities, exporting data to DefeactDojo, it would give us the view of advancing vulnerability management.
Can you make me understand?

Thank you for your attention to this topic.
--------------------------------------------------------------------
PT-BR
Mauricio,
Bom dia,
Nosso principal objetivo é fazer a gestão de vulnerabilidade dos servidores utilizando o Wazuh em conjunto com o DefectDojo.
Na console do Wazuh temos nossos servidores cadastrados e a visão de suas vulnerabilidades.
Integração o Wazuh com o DefectDojo teriamos como fazer a gestão das vulnerabilidades que foram corrigidas, as que estão ativas, métricas, etc...
Resumidamente, o Wazuh nos da a visão das vulnerabilidades, exportando dados para o DefeactDojo, ele nos daria a visão do avanço da gestão de vulnerabilidades.
Consegue me fazer entender?

Obrigado pela atenção a este tópico.

[Diego Zacché]

Dear,
Good morning,
Any returns?