Skill UI

DefectDojo is an open-source platform designed to centralize, aggregate, and manage security vulnerabilities. It integrates findings from over 200 security scanners (e.g., Nessus, ZAP, Trivy), automatically deduplicates results, tracks remediation progress, and provides executive-level dashboards. It supports robust workflows, including CI/CD pipeline integration and Jira ticketing, making it essential for DevSecOps practices and compliance adherence.

This skill defines the process and framework for establishing mandatory Service Level Agreements (SLAs) for mitigating identified vulnerabilities. It guides users on how to calculate remediation timeframes based on vulnerability severity (CVSS, KEV), asset criticality (Tier 1, 2, 3), and exploit availability. The process includes setting up escalation chains, defining exception processes, and tracking key performance indicators (KPIs) like Mean Time to Remediate (MTTR) to ensure robust security governance and compliance.

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.