Contrast Security Assess Reviews

Name: Contrast Security Assess
Brand: Contrast Security
Rating: 4.4 (11 reviews)

4.4 out of 5

11 reviews
100% willing to recommend

188 followers

What is Contrast Security Assess?

Contrast Security is the world’s leading provider of security technology that enables software applications to protect themselves against cyberattacks, heralding the new era of self-protecting software. Contrast's patented deep security instrumentation is the breakthrough technology that enables highly accurate assessment and always-on protection of an entire application portfolio, without disruptive scanning or expensive security experts. Only Contrast has sensors that work actively inside applications to uncover vulnerabilities, prevent data breaches, and secure the entire enterprise from development, to operations, to production.

Get the Contrast Security Assess Buyer's Guide and find out what your peers are saying about Contrast Security Assess, SonarQube Server (formerly SonarQube), Veracode and more!

Contrast Security Assess is the #24 ranked solution in AST tools and #29 ranked solution in application security solutions. PeerSpot users give Contrast Security Assess an average rating of 8.8 out of 10. Based on the analysis of the 11 most recent Contrast Security Assess reviews, the overall sentiment is positive, with a sentiment score of 7.2. Contrast Security Assess is most commonly compared to SonarQube Server (formerly SonarQube): Contrast Security Assess vs SonarQube Server (formerly SonarQube). Contrast Security Assess is popular among the large enterprise segment, accounting for 68% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 20% of all views.

Buyer's Guide

Contrast Security Assess

November 2024

Get the report

Helped 816,660 peers since 2012

Featured reviews

Mustufa Bhavnagarwala

CyberRisk Solution Advisor at Deloitte

Technical support for the solution should be faster. We have to further analyze what kind of CVEs are in the reported libraries and what part of the code is affected. That analysis can be added to the report that Contrast Security Assess gives. Further analysis should be done of the third-party libraries report that it gives. The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities. The onboarding or the setup of Contrast Security Assess can get a little easier.

Read full review

ToddMcAlister

Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees

Assess has brought our development time down because it helps create code the first time. Instead of going through the Jenkins process to build an application, they can see right off the bat that if there are errors in the code and fix them before it even goes to build.

Read full review

reviewer1605099

Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees

The solution is very accurate in identifying vulnerabilities. In cases where we are performing application assessment using Contrast Assess, and also using legacy application security testing tools, Contrast successfully identifies the same vulnerabilities that the other tools have identified but it also identifies significantly more. In addition, it has visibility into application components that other testing methodologies are unaware of. Assess also provides the option of helping developers incorporate security elements while they're writing code. It depends on whether individual developers decide to utilize the information that's provided to them from the solution, but it definitely gives them visibility into more environments. It gives them an opportunity to remediate vulnerabilities well before production deployments.

Read full review

Contrast Security Assess mindshare

Product category:

As of November 2024, the mindshare of Contrast Security Assess in the Static Application Security Testing (SAST) category stands at 0.4%, down from 0.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

Contrast Security Assess excels in identifying vulnerabilities accurately with minimal false positives, outperforming other tools. It provides real-time vulnerability detection and comprehensive stack trace details, aiding in timely fixes. The tool's integration into the development process enhances efficiency and incorporates security elements seamlessly. It also offers valuable features like third-party library monitoring, PCI compliance reports, and robust automation, significantly reducing the time and effort spent on vulnerability management.

"When we access the application, it continuously monitors and detects vulnerabilities."
"It is a stable solution...Contrast Security Assess is one of the first players in this market, so they have experience and customers, especially abroad. Overall, it's a good product."
"I am impressed with the product's identification of alerts and vulnerabilities."

Room for Improvement

Contrast Security Assess needs improvements in documentation and plugin integration. It lacks support for some technologies like .NET Core on Ubuntu and PHP. Users desire better scanning rules, client-side support, and more intuitive reporting. Technical support speed and onboarding processes could be enhanced. There's a need for better vulnerability fixes and ecosystem flexibility. Updates involve cumbersome downloads, and personalization options for reporting and dashboards could be improved for large organizations.

"The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities."
"The solution needs to improve flexibility...The scalability of the product is a problem in the solution, especially from a commercial perspective."
"The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes."

ROI

Several organizations have observed a return on investment with Contrast Security Assess. Contrast aids in securing key revenue-driving applications and reduces the attack surface by identifying vulnerabilities early in development. Continuous scanning allows teams to address software defects before production. Time savings occur for both security and development teams, as they handle fewer false positives and focus on actionable results. Code quality improves through reduced code use and streamlined processes.

Pricing

Contrast Security Assess pricing is straightforward, focusing on per-application licensing without regard to application size, making it ideal for large, monolithic applications. Enterprise buyers note that while pricing is industry-standard, it may not scale well in highly clustered environments. The tiered model allows flexibility with a pay-per-application system, benefitting environments with fewer onboarded applications. Developer licenses are sometimes required, leading to potential additional costs. Overall, the pricing is considered reasonable for its features.

"The solution is expensive."
"The product's pricing is low. I would rate it a two out of ten."
"It's a tiered licensing model. The more you buy, as you cross certain quantity thresholds, the pricing changes. If you have a smaller environment, your licensing costs are going to be different than a larger environment... The licensing is primarily per application. An application can be as many agents as you need. If you've got 10 development servers and 20 production servers and 50 QA servers, all of those agents can be reporting as a single application that utilizes one license."

Popular Use Cases

Contrast Security Assess is primarily used for enhancing security around legacy applications, providing application vulnerability scanning and pen-testing. It integrates into developer workflows for immediate vulnerability identification, supports multiple programming languages, and offers continuous monitoring. It operates on a cloud-hosted platform where data is aggregated, analyzed, and interacted with. Assess has improved visibility for code testing and includes features like secure source code analysis, providing detailed information about web application vulnerabilities and third-party library CVEs.

Service and Support

Contrast Security Assess provides responsive and helpful support, with quick response times and knowledgeable staff. Many users appreciate their enthusiastic and accommodating team, noting rapid responses to inquiries. Some have experienced delays in comprehending custom requests, but most find communication efficient. Despite some challenges with troubleshooting via cumbersome log files, the technical support is generally rated positively, often resolving issues promptly through web or email submissions. Contrast is recognized for its top-tier standard support.

Deployment

Initial setup for Contrast Security Assess is straightforward for many, involving adding the jar file to JVM arguments. Instructions are clear, but deployment varies by organization size and complexity. While some complete setup quickly, larger environments take longer due to multiple teams and applications. Users highlight easy integration with Java, .NET, and PCF, though automation is challenging due to varied applications. Maintenance involves collaboration with different teams, focusing on agent deployment and data management.

Scalability

Contrast Security Assess exhibits strong scalability, integrating well with various applications regardless of complexity. It allows widespread deployment across different environments, both cloud and on-premises. While some challenges exist in automation and technology support, organizations can scale efficiently with a robust change-management strategy. The ability to expand usage across multiple teams is significant, but requires initial setup and familiarization by key personnel. Development teams are gradually adapting to the platform due to its comprehensive application security features.

Stability

Contrast Security Assess exhibits significant stability, with most users experiencing minimal downtime and effective support. Some challenges arise from unsupported applications like ColdFusion and occasional performance impacts on specific applications. However, many find it reliable once deployed, with maintenance and monitoring streamlined. Assess performs well in preproduction and is robust for development sites. Users appreciate its smooth operation, high stability, and efficient handling of traffic.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Contrast Security Assess Buyer's Guide for additional reliable information.