Sold by: Contrast Security
Deployed on AWS
Protect applications and APIs from exploits and zero days. Gain instant visibility and actionable alerts, empowering the SOC to respond to application and API attacks and reduce risk.
4.5
Overview
Contrast Application Detection & Response (ADR) provides real-time visibility and protection for applications, enabling security teams to detect, respond to, and block attacks on applications and APIs as they happen. ADR defends applications against a wide range of threats, including zero-day exploits and vulnerabilities in both custom code and third-party libraries. This approach significantly reduces the risk of successful attacks and data breaches.
By continuously analyzing application behavior and data flow as applications run, Contrast ADR identifies malicious activity with industry leading accuracy. Low false positives eliminates the noise and provides SOCs with actionable intelligence: detailed attack context, including attacker IP, attack vector, targeted application component, and the specific vulnerability exploited. This code-level context facilitates immediate, informed response, minimizing the impact of any attempted breach. Crucially, ADR actively blocks attacks in real-time, preventing successful exploitation.
The Contrast Runtime Security Platform offers broad language support and integrates seamlessly with existing security solutions like the SIEM. instrumenting applications, Contrast ADR delivers a comprehensive layer of application security, reducing the overall attack surface and minimizing the risk of data breaches and disruptions.
Highlights
- See application and API attacks instantly: Get detailed alerts on app/API attacks. Detect and block malicious activity at its source to prevent successful exploits immediately Accelerate response to zero-days: Stop malicious activity in real-time and respond with guided runbooks. Gain full attack context for faster, effective response Prevent exploitation: Continuously monitor production for vulnerabilities. Add compensating controls and prioritize fixes to proactively prevent future exploits
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Contrast Application Detection & Response | SaaS - priced per concurrent host. Contact for more than 10 hosts. | $1,800.00 |
Dimensions summary
This listing offers one pricing dimension. You buy it as a SaaS subscription priced per concurrent host. A host is a production runtime environment where the software monitors and protects your applications. Your cost scales with the number of hosts you cover. This dimension supports up to 10 hosts. If you need more than 10 hosts, you contact the vendor for a quote. There are no separate tiers or add-ons on Marketplace — you select the host quantity you need.
Top-of-mind questions for buyers
A host is a production runtime environment where the agent runs and protects your applications. The software installs at runtime without code changes. You are billed per concurrent host actively covered. Each running production environment where the agent reports counts toward your host total.
Cost scales with the number of concurrent hosts you cover. The Marketplace dimension supports up to 10 hosts. Each additional host you protect adds to your total. If you need more than 10 hosts, you contact the vendor for a quote covering the larger deployment.
No. The agent installs once at runtime and instruments applications without requiring code changes or application restarts after setup. This means you can add coverage to a new host and it begins protecting once the agent reports, without redevelopment effort.
www.contrastsecurity.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Contrast Security offers a variety of support options to help ensure your success. Please visit our support page for more information
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
EMET malicious user journey analytics for SAP powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher quality alerts that help security analysts reduce wasted time on false positives.
EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher-quality alerts that help security analysts reduce wasted time on false positives. This is the "custom application edition" of the product.
EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect threats and fraud at the application layer. It provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. This results in higher quality alerts that help security analysts reduce wasted time on false positives. This Edition supports MS365, Salesforce, OKTA, AWS, AZURE, Dynamics 365 (other SaaS applications are to be discussed separately)
Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi). The Chainlink stack provides the essential data, interoperability, compliance, and privacy standards needed to power advanced blockchain use cases for institutional tokenized assets, lending, payments, stablecoins, and more. Since inventing decentralized oracle networks, Chainlink has enabled tens of trillions in transaction value and now secures the vast majority of DeFi.
Chainlink is at the forefront of financial innovation and the global tokenization trend. Traditional financial institutions and infrastructures, such as Swift, DTCC, Euroclear, J.P. Morgan, Mastercard, Central Bank of Brazil, UBS, SBI, Fidelity International, ANZ, and many others are adopting Chainlink as fundamental infrastructure as they move toward tokenizing trillions onchain.
Customer reviews
Slobodan O.
Contrast Security is manageable
Reviewed on Oct 20, 2023
Review provided by G2
What do you like best about the product?
The default scoring, for libraries sometimes be discouraging. There are some security risk categories that are not covered I have noticed that the product keeps improving. There is room for improvement in terms of SCA options and UI functionalities.
What do you dislike about the product?
The absence of alerts also limits our ability to proactively solve security threats. Navigating through the interface is difficult for users.
What problems is the product solving and how is that benefiting you?
Contrast Security has transformed our cybersecurity approach. It continuously monitors our applications in time and identifies vulnerabilities promptly. It automates security testing and removes the necessity, for code reviews.
Sibila D.
Security and compliance of our applications
Reviewed on Oct 09, 2023
Review provided by G2
What do you like best about the product?
Contrast Security provide language support is a bit slow, on occasion.It is customized to prioritize vulnerability detection.
What do you dislike about the product?
The interface of Contrast Security sometimes is cluttered making it difficult to navigate and locate information. This platform improves from a intuitive design that enhances user experience.
What problems is the product solving and how is that benefiting you?
They have solved our application security difficulties by providing vulnerability detection and protection.
Higher Education
Contrast Security makes application security simple
Reviewed on Aug 23, 2023
Review provided by G2
What do you like best about the product?
Contrast makes understanding vulnerabilities easy. For every vulnerability found in custom code, there is an answer to what the vulnerability is, why it is a risk, and how to fix the vulnerability. It is also great at identifying libraries used within the application and the potential vulnerabilites for each library.
What do you dislike about the product?
Although Contrast is great at identitfying libraries, the default scoring for the libraries can be very particular. It can make developers feel discouraged seeing an F score because the library is a version behind. There is a way to change the scoring to only look at associated vulnerabilities, but there is still a benefit to seeing libraries that are behind on updates.
What problems is the product solving and how is that benefiting you?
With Contrast's IAST product we are able to see vulnerabilities at runtime and it reduces the amount of false positives that we see with other tools. Communication with development teams has improved because the breakdown of vulnerabilities is so clear.
Kiran S.
Shift-Smart with Contrast
Reviewed on Aug 17, 2023
Review provided by G2
What do you like best about the product?
Contrast allows us to test an application during the run-time, which reduces the number of false positives we have to deal with in traditional SAST scans. The IAST testing combines SAST and DAST into one while identifying the issues in open-source libraries and custom code. The Integrations are easy and don't consume more system resources to run the agent. The Sales, TAM, management, and Support team has the customer-first approach; their support is amazing they cater to your needs.
What do you dislike about the product?
Language Support in IAST is a bit slow and manageable, but handling legacy applications is tough without having to scan some old versions of programming languages if they could expand their language support and have backward compatibility, that would be great.
What problems is the product solving and how is that benefiting you?
Securing our application in Run-time is a huge advantage, while developers can remediate the vulnerabilities during the development phases. Their platform provides us the 360 visibility and security for our application, which is a key business problem for any fin-tech company.
Danielle H.
Effective Tool
Reviewed on Aug 14, 2023
Review provided by G2
What do you like best about the product?
The most helpful features of contrast security would be real time protection and its accuracy. Our company really benefits from the continuous security monitoring and protection during runtime as well as the high accuracy rate of detecting vulnerablities
What do you dislike about the product?
The only downside I can think of is the amount of false positive/negatives.
What problems is the product solving and how is that benefiting you?
Hybrid testing... monitor our applications inner working. Accessing HTTP requests/responses and call stacks. Contrast Protect.. runtime protection is very important to the security of our applications