Contrast secures your entire application portfolio with industry leading speed and accuracy, while empowering teams to automatically find and fix vulnerabilities across every step of the software developer lifecycle.
"Contrast Security- Private Offer Only combines the benefits of the Private Offer feature along with Carahsoft's contract vehicles in providing customers a seamless acquisition process for their cloud-based products and solutions from AWS Marketplace.
At Contrast, we take an inside out approach that embeds security testing throughout the development lifecycle. This full context improves accuracy, catching more critical vulnerabilities and remediating faster than any other approach in the market. Our comprehensive platform unifies development, security, and operations to help get secure code moving through your organization. You can secure code - web applications, cloud native, APIs, and open source - across the entire software development lifecycle all from one platform.
The Contrast Platform is comprised of:
Contrast Assess offers interactive application security testing (IAST) to identify software vulnerabilities in real time while developers write code automatically. Contrast Assess agents instrument an application that allows monitoring code and report from within the application. With this depth of context, Contrast Assess can reduce alert noise caused by false positives and eliminate hours of work required by DevOps teams to find and fix vulnerabilities without the need for specialized security expertise.
Contrast Protect empowers teams to defend their applications anywhere they run, by embedding an automated and accurate runtime protection capability within the application to continuously monitor and block attacks.
Contrast Scan is a (SAST) source code scanning tool built from the ground up. Contrast Scan utilizes a pipeline-native approach to static application security testing that eliminates the inefficiencies that delay release cycles. Make security testing a simple routine that prioritizes the most pressing vulnerabilities to deliver fast, accurate and actionable results.
Contrast SCA enables businesses to protect their software supply chain by identifying real threats from third-party libraries across the entire software development lifecycle. With Contrast SCA, detect which open-source software components are called in the application runtime and prioritize vulnerability remediation based on which libraries are actively being used.
Contrast Serverless is a purpose-built cloud native application security testing solution to help customers secure their AWS Lambda functions and improve their security posture across their environment.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers four independent products you can buy separately based on your security needs. Contrast Assess is priced per application and includes 10 developers, covering vulnerability testing and dependency analysis. Contrast Protect bills per application instance for runtime attack protection. Contrast Scan bills per developer for static code analysis. Contrast Serverless bills per developer for cloud-native coverage across scanning, testing, and access management. Each product uses its own unit, so your cost scales with either applications, application instances, or developer count depending on which products you select. Access is through a private offer only.
Top-of-mind questions for buyers
What counts as one unit for Contrast Assess versus Contrast Protect billing?
Contrast Assess bills per application and bundles 10 developers into each unit, covering vulnerability testing and dependency analysis. Contrast Protect bills per application instance, meaning each running deployment of an application counts separately. So Assess scales with your app count, while Protect scales with how many instances run.
For Contrast Scan and Contrast Serverless, how does the per-developer unit affect my cost?
Both Contrast Scan and Contrast Serverless bill per developer. Your cost scales with the number of developers you cover, not the number of applications. Contrast Scan provides static code analysis. Contrast Serverless adds cloud-native coverage across scanning, testing, dynamic analysis, and access management for the same per-developer unit.
Can I buy these four products separately, and how do their charges combine?
You can buy each product independently based on your needs. Because each uses a different unit, their charges bill separately and add together. Assess and Protect scale with applications or instances, while Scan and Serverless scale with developer count. Your total depends on which products you select and how you scale each.
www.contrastsecurity.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Protect applications and APIs from exploits and zero days. Gain instant visibility and actionable alerts, empowering the SOC to respond to application and API attacks and reduce risk.
Contrast Runtime Application Security Platform equips developers, AppSec and SecOps teams with one platform that proactively identifies runtime application vulnerabilities in pre- and post production in order to protect and defend applications and APIs against evolving threats. Armed with the right knowledge, security teams can identify exploitable issues, detect incidents in real-time, and block attacks. This enables them to achieve a more accurate and actionable security posture than they could with traditional network and endpoint security tools.
Contrast enables confidential Kubernetes deployments by running workloads inside hardware-encrypted confidential micro-VMs using AMD SEV-SNP and Intel TDX. It keeps your data always encrypted, at rest, in transit, and in use, removing cloud infrastructure, cluster administrators, and datacenter employees from your trusted computing base. Easily integrate Contrast into your existing Kubernetes workflows with a lift-and-shift approach for unmodified containers, ensuring runtime encryption, workload attestation, and verifiable security for compliance-sensitive and multi-party computing scenarios.
A single, unified platform for financial consolidation, planning, reporting, analytics, and ESG compliance. CCH Tagetik Intelligent Platform connects finance and operations with end-to-end automation and embedded AI so you can accelerate the close, enhance accuracy, and drive smarter decisions. For customized Private Offer pricing, please contact dorene.niotakis@wolterskluwer.com to request a quote for the scope of your project.
Carbyne's cloud-native emergency response platform unifies voice, live video, text, real-time location, and data in one intuitive interface. Features include AI-powered call triage for faster prioritization, live audio transcription and real-time translation to support multilingual and noisy environments, and silent instant messaging to protect callers in unsafe situations. Built-in precise location tracking ensures responders reach the right place quickly. Seamless integrations with CAD, RMS, and GIS streamline coordination from dispatch to field operations. Zero-trust architecture and 99.999% call handling uptime deliver unmatched resilience. Carbyne helps agencies and enterprises improve situational awareness, reduce response times, and save lives because every second matters, and every person counts.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.