Sold by: Contrast Security
Contrast Runtime Application Security Platform equips developers, AppSec and SecOps teams with one platform that proactively identifies runtime application vulnerabilities in pre- and post production in order to protect and defend applications and APIs against evolving threats. Armed with the right knowledge, security teams can identify exploitable issues, detect incidents in real-time, and block attacks. This enables them to achieve a more accurate and actionable security posture than they could with traditional network and endpoint security tools.
4.5
Overview
The Contrast Runtime Security Platform provides real-time, always-on security inside applications and APIs. Customers experience the power of instrumentation by embedding threat sensors that detect and secure applications from within. They gain visibility into runtime telemetry and secure the entire application stack and software supply chain to detect exploitable vulnerabilities in real-time, and leverage context-rich application threat alerts to quickly triage, prioritize and respond to advanced threats. Built on a common set of powerful technology, the Contrast Runtime Security Platform offers:
One platform. With the Contrast Runtime Security Platform, gain a single platform to manage all critical aspects of AppSec, from vulnerability management to attack migration. In addition to this, Contrast also monitors applications across all environments from development, staging, and production to instantly flag vulnerabilities and active exploits. It also integrations seamlessly with DevOps and SecOps tooling and workflows to ensure a seamless experience.
Unified infrastructure. Leverage threat sensors within every environment, to provide instant protection for Java, .NET, Node.js, PHP, Python, Go and more. Once the threat sensors are deployed, security rules can be applied instantly across all applications, without the need for re-deployment. Finally, there is minimal system impact. Contrast sensors detect exploitable vulnerabilities missed in development, without impacting performance.
Any application. Contrast uniquely secures the full application stack. This includes 3rd-party applications, custom codes, and dependencies. As the application data is fed into the platform, Contrast analyzes hundreds or thousands of applications across all environments to provide real-time dashboards that cover inventory, the attack surface, vulnerabilities, threats, defenses, connections and more.
Highlights
- Runtime application security: Experience the power of instrumentation by embedding threat sensors that detect vulnerabilities and secure applications from within. Observe and detect vulnerabilities: Gain visibility and secure the entire application stack and software supply chain, detecting exploitable vulnerabilities in real-time. Prioritize and respond to attacks: Leverage context-rich application threat alerts to quickly triage, prioritize and respond to advanced threats.
- You cannot stop what you cannot see.
- Secure your code throughout the entire development lifecycle from one platform
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Contrast Assess | SaaS - priced per application | $12,000.00 |
Contrast Scan | SaaS - priced per project | $4,500.00 |
Contrast ADR | Contrast Runtime Application Security Platform equips developers, AppSec and SecOps teams with one platform that proactively identifies runtime application vulnerabilities in pre- and post production in order to protect and defend applications and APIs against evolving threats. Armed with the right knowledge, security teams can identify exploitable issues, detect incidents in real-time, and block attacks. This enables them to achieve a more accurate and actionable security posture than they could with traditional network and endpoint security tools. | $1,800.00 |
Dimensions summary
This listing offers three independent pricing dimensions under one platform contract. You choose the modules you need rather than moving through fixed tiers. Contrast Assess is billed per application, so cost scales with the number of applications you monitor. Contrast Scan is billed per project, so cost scales with the number of scanning projects. Contrast ADR covers runtime detection and response for applications and APIs. Each dimension is metered separately, letting you combine them based on your coverage needs. All three are sold as SaaS under a contract commitment.
Top-of-mind questions for buyers
Contrast Assess is billed per application. The vendor describes an application as a set of independently deployable runtime components called services. A service handles a specific business capability, such as billing or shipping. A typical application groups several services together. Coverage for a new application begins once the agent starts reporting.
You buy each module separately. Contrast Assess cost tracks the number of applications monitored. Contrast Scan cost tracks the number of scanning projects. Contrast ADR covers runtime detection and response for applications and APIs. The modules are metered independently and appear as separate line items, so you combine only what you need.
Contrast Assess analyzes running code to find vulnerabilities during development and testing. Contrast Scan is static code scanning that runs in your build pipeline across many languages. Contrast ADR monitors production applications and APIs, detecting and blocking attacks at runtime. Each addresses a different stage, so pick the modules matching your coverage goals.
www.contrastsecurity.com+3
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Contrast Security offers a variety of support options to help ensure your success. Please visit our support page for more information
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Protect applications and APIs from exploits and zero days. Gain instant visibility and actionable alerts, empowering the SOC to respond to application and API attacks and reduce risk.
Contrast enables confidential Kubernetes deployments by running workloads inside hardware-encrypted confidential micro-VMs using AMD SEV-SNP and Intel TDX. It keeps your data always encrypted, at rest, in transit, and in use, removing cloud infrastructure, cluster administrators, and datacenter employees from your trusted computing base. Easily integrate Contrast into your existing Kubernetes workflows with a lift-and-shift approach for unmodified containers, ensuring runtime encryption, workload attestation, and verifiable security for compliance-sensitive and multi-party computing scenarios.
Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi). The Chainlink stack provides the essential data, interoperability, compliance, and privacy standards needed to power advanced blockchain use cases for institutional tokenized assets, lending, payments, stablecoins, and more. Since inventing decentralized oracle networks, Chainlink has enabled tens of trillions in transaction value and now secures the vast majority of DeFi.
Chainlink is at the forefront of financial innovation and the global tokenization trend. Traditional financial institutions and infrastructures, such as Swift, DTCC, Euroclear, J.P. Morgan, Mastercard, Central Bank of Brazil, UBS, SBI, Fidelity International, ANZ, and many others are adopting Chainlink as fundamental infrastructure as they move toward tokenizing trillions onchain.
Computer vision based solution to correct contrast/ brightness in scanned documents to improve performance of document processing pipelines.
The official foundation model for image generation from Stability. Deploy this optimized instance and serve generative AI within minutes.
Customer reviews
Slobodan O.
Contrast Security is manageable
Reviewed on Oct 20, 2023
Review provided by G2
What do you like best about the product?
The default scoring, for libraries sometimes be discouraging. There are some security risk categories that are not covered I have noticed that the product keeps improving. There is room for improvement in terms of SCA options and UI functionalities.
What do you dislike about the product?
The absence of alerts also limits our ability to proactively solve security threats. Navigating through the interface is difficult for users.
What problems is the product solving and how is that benefiting you?
Contrast Security has transformed our cybersecurity approach. It continuously monitors our applications in time and identifies vulnerabilities promptly. It automates security testing and removes the necessity, for code reviews.
Sibila D.
Security and compliance of our applications
Reviewed on Oct 09, 2023
Review provided by G2
What do you like best about the product?
Contrast Security provide language support is a bit slow, on occasion.It is customized to prioritize vulnerability detection.
What do you dislike about the product?
The interface of Contrast Security sometimes is cluttered making it difficult to navigate and locate information. This platform improves from a intuitive design that enhances user experience.
What problems is the product solving and how is that benefiting you?
They have solved our application security difficulties by providing vulnerability detection and protection.
Higher Education
Contrast Security makes application security simple
Reviewed on Aug 23, 2023
Review provided by G2
What do you like best about the product?
Contrast makes understanding vulnerabilities easy. For every vulnerability found in custom code, there is an answer to what the vulnerability is, why it is a risk, and how to fix the vulnerability. It is also great at identifying libraries used within the application and the potential vulnerabilites for each library.
What do you dislike about the product?
Although Contrast is great at identitfying libraries, the default scoring for the libraries can be very particular. It can make developers feel discouraged seeing an F score because the library is a version behind. There is a way to change the scoring to only look at associated vulnerabilities, but there is still a benefit to seeing libraries that are behind on updates.
What problems is the product solving and how is that benefiting you?
With Contrast's IAST product we are able to see vulnerabilities at runtime and it reduces the amount of false positives that we see with other tools. Communication with development teams has improved because the breakdown of vulnerabilities is so clear.
Kiran S.
Shift-Smart with Contrast
Reviewed on Aug 17, 2023
Review provided by G2
What do you like best about the product?
Contrast allows us to test an application during the run-time, which reduces the number of false positives we have to deal with in traditional SAST scans. The IAST testing combines SAST and DAST into one while identifying the issues in open-source libraries and custom code. The Integrations are easy and don't consume more system resources to run the agent. The Sales, TAM, management, and Support team has the customer-first approach; their support is amazing they cater to your needs.
What do you dislike about the product?
Language Support in IAST is a bit slow and manageable, but handling legacy applications is tough without having to scan some old versions of programming languages if they could expand their language support and have backward compatibility, that would be great.
What problems is the product solving and how is that benefiting you?
Securing our application in Run-time is a huge advantage, while developers can remediate the vulnerabilities during the development phases. Their platform provides us the 360 visibility and security for our application, which is a key business problem for any fin-tech company.
Danielle H.
Effective Tool
Reviewed on Aug 14, 2023
Review provided by G2
What do you like best about the product?
The most helpful features of contrast security would be real time protection and its accuracy. Our company really benefits from the continuous security monitoring and protection during runtime as well as the high accuracy rate of detecting vulnerablities
What do you dislike about the product?
The only downside I can think of is the amount of false positive/negatives.
What problems is the product solving and how is that benefiting you?
Hybrid testing... monitor our applications inner working. Accessing HTTP requests/responses and call stacks. Contrast Protect.. runtime protection is very important to the security of our applications