Webinar Description
Key Takeaways
- Technical demonstration of the Triage Engine feature in DefectDojo Pro for automating vulnerability management workflows
- Covers rule creation, simulation testing and monitoring of automated actions
- Includes practical use cases such as auto-assigning findings and automatic Jira ticket creation
- Designed for AppSec professionals, security engineers and DevSecOps teams managing findings at scale
About the Webinar
This virtual webinar provides a hands-on demonstration of the Triage Engine in DefectDojo Pro, a feature designed to automate the handling of security findings. Led by Matt Tesauro, CTO and Co-Founder, the session walks through building automation rules that convert manual triage decisions into repeatable workflows. A recording will be available following the live session.
Automation Capabilities Covered
The webinar demonstrates how to create rules that automatically process security findings based on defined criteria. Specific capabilities include auto-assigning findings to team members and generating Jira issues without manual intervention. Attendees will learn how to simulate rules before deployment to verify expected behaviour, then monitor rule actions to understand why changes occur within their environment.
Vulnerability Management Challenges Addressed
The session targets common operational challenges in application security programmes: manual and repetitive triage processes, difficulty scaling AppSec operations as finding volumes grow, and accumulating backlogs of unresolved vulnerabilities. The Triage Engine approach aims to reduce these bottlenecks by encoding triage logic into automated rules.
Who Should Attend
The webinar is suited to application security professionals, security engineers and DevSecOps teams responsible for vulnerability management. SOC analysts, penetration testers and security leaders overseeing AppSec programmes may also find value in understanding automation options. The content is particularly relevant for organisations managing large volumes of security findings across multiple tools and teams.