After years of sending many and varied vulnerability reports to different organisations, Josh switched sides to join the Blue Team at Trade Me and suddenly had to deal with the other side of the equation, figuring out how best to triage all of the various sources of vulnerability/security reporting and get that information to the right teams. Enter DefectDojo, an OWASP product which Trade Me is now using to aggregate security information and manage vulnerability lifecycles. This talk will go into the lessons learned while wiring this up and highlight how Trade Me is using this tool to make vulnerability management more manageable.