Access & Identity Management on DefectDojo Trust Center

Access Control Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this policy is to ensure the appropriate access to the correct information and resources is granted only for authorized users. In addition, to inform all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations with regards to the User Access of all systems, networks, and IT assets, and licensed software owned, operated, or used by DefectDojo.

API Security Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this policy is to inform all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations with regards to the security of Application Programming Interfaces (APIs) of all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.

Asset Management Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this document is the identification and management of assets. In addition, it informs all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations regarding the Asset Management of all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.

Logging and Monitoring Policy

Thu, 08 Jan 2026 00:00:00 +0000

Purpose

The purpose of this policy is to address the identification and management of the risk of system-based security events by logging and monitoring systems, and to record events and gather evidence. It also informs all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations regarding logging and monitoring of all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.

Password Policy

Thu, 08 Jan 2026 00:00:00 +0000

Password Policy

Purpose

The purpose of this policy is to set the minimum standards for password creation and management. It also informs all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations regarding password management for all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.