--- title: Contrast Security Reviews meta_title: 'Contrast Security Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 49 reviews by the users' company size, role or industry to find out how Contrast Security works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 49 scale: '5' date_modified: '2026-08-11' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Contrast Security Reviews **Vendor:** Contrast Security **Category:** [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast) **Average Rating:** 4.5/5.0 **Total Reviews:** 49 ## About Contrast Security Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented threat sensors directly into the software, delivering unmatched visibility and protection. With continuous, real-time defense, Contrast uncovers hidden application layer risks that traditional solutions miss. Contrast’s powerful Runtime Security technology equips developers, AppSec teams and SecOps with one platform that proactively protects and defends applications and APIs against evolving threats. ## Contrast Security Pros & Cons **What users like:** - Users value the **accuracy of findings** from Contrast Security, ensuring greater precision in identifying vulnerabilities. (2 reviews) - Users value the **accuracy of results** from Contrast Security, benefiting from precise vulnerability monitoring and analysis. (2 reviews) - Users commend the **real-time vulnerability detection** of Contrast Security, appreciating its quick feedback and agile support. (2 reviews) - Automated Scanning (1 reviews) - Automation (1 reviews) - Automation Testing (1 reviews) - Customer Support (1 reviews) - Users commend the **real-time vulnerability detection** of Contrast Security, appreciating its quick turnaround and excellent support. (1 reviews) - Ease of Use (1 reviews) - Insightful Analysis (1 reviews) **What users dislike:** - Complex Setup (1 reviews) - Difficult Setup (1 reviews) - Users experienced **performance issues** with Contrast Security, particularly with Java applications, but found support helpful in resolving them. (1 reviews) - Problematic Updates (1 reviews) - Setup Complexity (1 reviews) - Setup Difficulty (1 reviews) - Slow Performance (1 reviews) - Update Issues (1 reviews) ## Contrast Security Reviews ### 1. Contrast does a great job in finding Code and Open Source Vulnerabilities during runtime, **Rating:** 3.0/5.0 stars **Reviewed by:** Pankaj K. | Enterprise (> 1000 emp.) **Reviewed Date:** August 08, 2023 **What do you like best about Contrast Security?** Contrast does a great job in finding Code and Open Source Vulnerabilities during runtime, Contrast automatically reduces false positives **What do you dislike about Contrast Security?** Contrast Reporting features and Protect Configuration Performance Issues being reported. **What problems is Contrast Security solving and how is that benefiting you?** Primarily to find application Vulnerabilities at runtime and integrating it with Development process ### 2. Solid option for IAST scanning within certain languages & public clouds **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** November 24, 2021 **What do you like best about Contrast Security?** Simple UI with solid IAST & SCA scans built into Contrast Assess/OSS product. **What do you dislike about Contrast Security?** Less robust features for .NET-based workloads: Azure functions/serverless not available (only app services), Azure DevOps integrations work but are not intensive, Contrast support are generally less-knowledgeable on .NET environments (optimized for Java & AWS environments). **Recommendations to others considering Contrast Security:** Contrast is easy to use once integrated, but it depends on your development stack. Contrast is heavily-optimized towards Java and AWS workloads/environments but are creating more and more in the .NET and Azure fields as well. Unfortunately for my client, they are heavily .NET and Azure-based so some features are not available at the time of this review. If you are looking for an IAST, SCA, RASP option, Contrast is solid. **What problems is Contrast Security solving and how is that benefiting you?** Implementing DevSecOps initiatives for a large health care client. Building Assess & OSS into pipelines & app service scans are helpful feedback loops for our dev teams. This project is the first time our client has prioritized this sort of work and the client is very excited to have security more baked-in to the development lifecycle. ## Contrast Security Discussions - [What is contrast protect?](https://www.g2.com/discussions/what-is-contrast-protect) - [Is Contrast security SaaS?](https://www.g2.com/discussions/is-contrast-security-saas) - [What is Contrast security tool?](https://www.g2.com/discussions/what-is-contrast-security-tool) - [What does contrast security do?](https://www.g2.com/discussions/what-does-contrast-security-do) - [View Contrast Security pricing details and edition comparison](https://www.g2.com/products/contrast-security-contrast-security/reviews?filters%5Bnps_score%5D%5B%5D=3§ion=pricing&secure%5Bexpires_at%5D=2026-08-13+11%3A51%3A25+-0500&secure%5Bsession_id%5D=19b8c379-ed2c-4206-bc23-3465734e7b12&secure%5Btoken%5D=69bf1d57808c607bcafd840d99cc5e8da0fef08e988618cf87cebecaa0ecc1cc&format=llm_user) ## Contrast Security Features **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans - Anomaly/Malware Detection **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Threat Detection & Response - Runtime Application Self-Protection (RASP)** - Threat Remediation - Threat Detection - Application Behavior Monitoring - Intelligence and Reporting **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring - Vulnerability Scanning - Source-Code Scanning - Web Scanning **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing - Risk Analysis **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security - Runtime Container Security - Asset Discovery - Threat Intelligence - Vulnerability Protection - Alerts/Notifications - Vulnerability/Threat Prioritization - Generative AI - SQL Injections - Real-Time Analytics - Threat Protection - Web-Application Security - Password Protection - Website Crawling - Vulnerability Assessment **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard ## Top Contrast Security Alternatives - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - 4.4/5.0 (153 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (839 reviews) - [Dynatrace](https://www.g2.com/products/dynatrace/reviews) - 4.5/5.0 (1,234 reviews)