# Contrast Security Reviews **Vendor:** Contrast Security **Category:** [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast) **Average Rating:** 4.5/5.0 **Total Reviews:** 49 ## About Contrast Security Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented threat sensors directly into the software, delivering unmatched visibility and protection. With continuous, real-time defense, Contrast uncovers hidden application layer risks that traditional solutions miss. Contrast’s powerful Runtime Security technology equips developers, AppSec teams and SecOps with one platform that proactively protects and defends applications and APIs against evolving threats. ## Contrast Security Pros & Cons **What users like:** - Users value the **accuracy of findings** from Contrast Security, ensuring greater precision in identifying vulnerabilities. (2 reviews) - Users value the **accuracy of results** from Contrast Security, benefiting from precise vulnerability monitoring and analysis. (2 reviews) - Users commend the **real-time vulnerability detection** of Contrast Security, appreciating its quick feedback and agile support. (2 reviews) - Automated Scanning (1 reviews) - Automation (1 reviews) - Automation Testing (1 reviews) - Customer Support (1 reviews) - Users commend the **real-time vulnerability detection** of Contrast Security, appreciating its quick turnaround and excellent support. (1 reviews) - Ease of Use (1 reviews) - Insightful Analysis (1 reviews) **What users dislike:** - Complex Setup (1 reviews) - Difficult Setup (1 reviews) - Users experienced **performance issues** with Contrast Security, particularly with Java applications, but found support helpful in resolving them. (1 reviews) - Problematic Updates (1 reviews) - Setup Complexity (1 reviews) - Setup Difficulty (1 reviews) - Slow Performance (1 reviews) - Update Issues (1 reviews) ## Contrast Security Reviews ### 1. Shift-Smart with Contrast **Rating:** 5.0/5.0 stars **Reviewed by:** Kiran S. | Enterprise (> 1000 emp.) **Reviewed Date:** August 17, 2023 **What do you like best about Contrast Security?** Contrast allows us to test an application during the run-time, which reduces the number of false positives we have to deal with in traditional SAST scans. The IAST testing combines SAST and DAST into one while identifying the issues in open-source libraries and custom code. The Integrations are easy and don't consume more system resources to run the agent. The Sales, TAM, management, and Support team has the customer-first approach; their support is amazing they cater to your needs. **What do you dislike about Contrast Security?** Language Support in IAST is a bit slow and manageable, but handling legacy applications is tough without having to scan some old versions of programming languages if they could expand their language support and have backward compatibility, that would be great. **What problems is Contrast Security solving and how is that benefiting you?** Securing our application in Run-time is a huge advantage, while developers can remediate the vulnerabilities during the development phases. Their platform provides us the 360 visibility and security for our application, which is a key business problem for any fin-tech company. ### 2. Contrast Security makes application security simple **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Higher Education | Mid-Market (51-1000 emp.) **Reviewed Date:** August 23, 2023 **What do you like best about Contrast Security?** Contrast makes understanding vulnerabilities easy. For every vulnerability found in custom code, there is an answer to what the vulnerability is, why it is a risk, and how to fix the vulnerability. It is also great at identifying libraries used within the application and the potential vulnerabilites for each library. **What do you dislike about Contrast Security?** Although Contrast is great at identitfying libraries, the default scoring for the libraries can be very particular. It can make developers feel discouraged seeing an F score because the library is a version behind. There is a way to change the scoring to only look at associated vulnerabilities, but there is still a benefit to seeing libraries that are behind on updates. **What problems is Contrast Security solving and how is that benefiting you?** With Contrast's IAST product we are able to see vulnerabilities at runtime and it reduces the amount of false positives that we see with other tools. Communication with development teams has improved because the breakdown of vulnerabilities is so clear. ### 3. A complete and useful security tool **Rating:** 5.0/5.0 stars **Reviewed by:** Natasha M. | Enterprise (> 1000 emp.) **Reviewed Date:** August 10, 2023 **What do you like best about Contrast Security?** It has a great product portfolio, besides the backend code analysis there's also a front end analysis for popular frameworks such as react or angular. Also it has a configuration for the pipelines, a lot of products doesn't have all in one **What do you dislike about Contrast Security?** It will be really useful to get some kind of log for the vulnerabilities that were closed as remediated/fixed/not a problem to know why contrast reopened them as resported status **What problems is Contrast Security solving and how is that benefiting you?** Contrast is helping us to go deeper on the pentesting activities, to find vulnerabilities that cannot be seen by just assesing the front end, it helps us to find CVEs on the application libraries and insecure code in the back end ### 4. Contrast Security Testing in Real-Time **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Logistics and Supply Chain | Enterprise (> 1000 emp.) **Reviewed Date:** August 08, 2023 **What do you like best about Contrast Security?** Contrast Security is a very agile security service product provider, they listen to customers and react quickly to customer's feedback, and release often to address issues. Support is excellent to work with when issue comes up. Contrast security platform enables realtime security testing with quick turn around on vulnerability findings, it is also capable of doing WAF functions to protect application in real-time. **What do you dislike about Contrast Security?** Not much negtive things could be said regarding Contrast Security as a whole. There are still some security risk categories are not comvered under Assess evaluation process, it could be mainly due to that it is installed behind firewall. Also the Protect module does not cover certains type of attacks. As they continue to enhance/improve they product, will expect more to be covered. **What problems is Contrast Security solving and how is that benefiting you?** Security testing via real-time traffic will be accurate in security evaluation, the Assess has good visibilities to vulnerabilites on application side. Also protection could block attacks as requests come in. ### 5. Dev Focused IAST Tool that helps you shift left in your security testing **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Medical Devices | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2023 **What do you like best about Contrast Security?** Automation options and accuracy of vulnerabilities, easy to integrate with all of our dev ops tools, and amazing level of support documentation and knowledge. The team is always willing to help when we are stuck on any issues impacting our service. **What do you dislike about Contrast Security?** Some SCA options are weakly implemented. I also dislike the fact that contrast does not have a SAST option for my front end UI code available. Contrast can also benefit from some strong analystics options built into Team center UI for my team to glean better insights into our application security program. **What problems is Contrast Security solving and how is that benefiting you?** We are able to reduce our time to discover and remediate new security bugs in our code. The SCA feature allows us to better assess the true risk of a CVE by telling us if the method is called and the code is actually being used in third party libraries. This reduces our need to patch everything immediately upon discovery of new CVEs. We are able to empower our devs to resolve all issues quickly without too much hand holding by the security team. ### 6. Contrast Security is manageable **Rating:** 5.0/5.0 stars **Reviewed by:** Slobodan O. | Advisor, Food & Beverages, Enterprise (> 1000 emp.) **Reviewed Date:** October 20, 2023 **What do you like best about Contrast Security?** The default scoring, for libraries sometimes be discouraging. There are some security risk categories that are not covered I have noticed that the product keeps improving. There is room for improvement in terms of SCA options and UI functionalities. **What do you dislike about Contrast Security?** The absence of alerts also limits our ability to proactively solve security threats. Navigating through the interface is difficult for users. **What problems is Contrast Security solving and how is that benefiting you?** Contrast Security has transformed our cybersecurity approach. It continuously monitors our applications in time and identifies vulnerabilities promptly. It automates security testing and removes the necessity, for code reviews. ### 7. Effective Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Danielle H. | Enterprise (> 1000 emp.) **Reviewed Date:** August 14, 2023 **What do you like best about Contrast Security?** The most helpful features of contrast security would be real time protection and its accuracy. Our company really benefits from the continuous security monitoring and protection during runtime as well as the high accuracy rate of detecting vulnerablities **What do you dislike about Contrast Security?** The only downside I can think of is the amount of false positive/negatives. **What problems is Contrast Security solving and how is that benefiting you?** Hybrid testing... monitor our applications inner working. Accessing HTTP requests/responses and call stacks. Contrast Protect.. runtime protection is very important to the security of our applications ### 8. Contrast is a powerful tool. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** August 11, 2023 **What do you like best about Contrast Security?** Contrast has a great breadth of technologies on offer. The insights that the tools provides are in depth, but also explain everything simply. When looking at vulnerabilities that were found, it is very easy to trace what has happened. **What do you dislike about Contrast Security?** Contrast is a bit hard to implement in our environment. We were forced to use a deprecated package due to our environment being a bit outdated. The licensing with the RASP solution is not what we initially thought when purchasing the product. **What problems is Contrast Security solving and how is that benefiting you?** Contrast is helping us identify vulnerabilities that are presenting themselves during the running of an application through IAST, while RASP is helping us to block attacks, and see what avenues attacks are coming through. ### 9. Great Tool for Application Vulnerabilities **Rating:** 4.0/5.0 stars **Reviewed by:** Tharindu M. | Mid-Market (51-1000 emp.) **Reviewed Date:** August 09, 2023 **What do you like best about Contrast Security?** Best service from the support team and tool is accurate enough to hand over to any dev team **What do you dislike about Contrast Security?** UI functionalities are little bit on the down side **What problems is Contrast Security solving and how is that benefiting you?** RASP products help to protect our legacy applications, and IAST provides a better overview of the application vulnerabilities. SCA is also a good way of identifying libraries. ### 10. Contrast Assess and Protect **Rating:** 4.5/5.0 stars **Reviewed by:** Anirudha B. | Enterprise (> 1000 emp.) **Reviewed Date:** August 09, 2023 **What do you like best about Contrast Security?** Ease of use. Customer service. The Contarst Dashboard provides a good view of security posture for your organization. **What do you dislike about Contrast Security?** Contrast Scan tool needs to be improved. The scan has limited language and framework support. **What problems is Contrast Security solving and how is that benefiting you?** Contrast Security allows us to control the quality of software getting deployed to Production from a Security view point. ## Contrast Security Discussions - [What is contrast protect?](https://www.g2.com/discussions/what-is-contrast-protect) - [Is Contrast security SaaS?](https://www.g2.com/discussions/is-contrast-security-saas) - [What is Contrast security tool?](https://www.g2.com/discussions/what-is-contrast-security-tool) - [What does contrast security do?](https://www.g2.com/discussions/what-does-contrast-security-do) - [View Contrast Security pricing details and edition comparison](https://www.g2.com/products/contrast-security-contrast-security/reviews/contrast-security-review-5032572?section=pricing&secure%5Bexpires_at%5D=2026-05-30+18%3A06%3A45+-0500&secure%5Bsession_id%5D=18c52e7a-2332-4409-be29-0cd991f7f50a&secure%5Btoken%5D=c29a26172855897d2ffb1d487532830dc8e387649e742174d261577250c9811b&format=llm_user) ## Contrast Security Features **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Threat Detection & Response - Runtime Application Self-Protection (RASP)** - Threat Remediation - Threat Detection - Application Behavior Monitoring - Intelligence and Reporting **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Code Analysis **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution ## Top Contrast Security Alternatives - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - 4.4/5.0 (140 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (789 reviews) - [Dynatrace](https://www.g2.com/products/dynatrace/reviews) - 4.5/5.0 (1,231 reviews)