Contrast Security Reviews

Pros

Room to improve the SCA options and some of the UI functionality still exists even though there's clearly progress being made. One thing I've noticed is that the product continues to get better over time. The default scoring for libraries can sometimes feel discouraging and there are still a few security risk categories that aren't covered yet.

Cons

Not having alerts in place makes it harder for us to deal with security threats before they become bigger issues. The interface is also not very user friendly so getting around it can be difficult for users.

Pros

One thing I appreciate about Contrast Security is how specifically it's customized to prioritize vulnerability detection. The only minor issue is that language support can be a little slow at times but overall it does a good job where it matters most.

Cons

At times, the Contrast Security interface feels cluttered which can make navigation and finding information harder than it should be. It would be much better with a more clean design that improves the overall user experience.

Pros

Contrast does a really good job of making vulnerabilities understandable. Whenever it finds an issue in custom code, it explains what the vulnerability is, why it matters and how to remediate it. It's also very effective at detecting the libraries used in the application and highlighting the possible vulnerabilities tied to each one.

Cons

Being alerted when libraries are behind on updates still has some value even though there's an option to adjust the scoring so it focuses only on related vulnerabilities. One downside is that the default library scoring can feel overly strict and developers can get discouraged when they see an F rating just because a library is one version behind.

Pros

Running Contrast while the application is live helps cut down a lot of the false positives we usually see with traditional SAST scans. Its IAST approach brings SAST and DAST together in one place and does a great job of spotting issues in both open-source libraries and custom-built code. The integrations are simple and the agent runs without taking up many system resources. On top of that, the Sales team, TAM, management and Support have a very customer-first mindset and their support has been outstanding in addressing our needs.

Cons

IAST language support feels a little slow and while it's still manageable, working with legacy applications can be difficult. It becomes challenging when older programming language versions need to be scanned so broader language coverage and better backward compatibility would really improve the experience.

Pros

Real-time protection and strong accuracy are the biggest advantages of Contrast Security. Our company gets a lot of value from the continuous security monitoring and runtime protection and it does a very good job of detecting vulnerabilities accurately.

Cons

The only drawback that comes to mind is the number of false positives and false negatives.

Pros

Helpful and supportive whenever needed is how the sales and support teams have consistently been. Getting this platform up and running was very simple and using it every day has been just as easy. They also keep working on updates and improvements which shows they are invested in making the product better.

Cons

During the past year, there were one or two web service outages. The product documentation could also be better especially around troubleshooting, integrations and route coverage.

Pros

Right away, it impressed us with the wide range of technologies it supports. The insights from the tools are detailed yet they're explained in a very clear and easy to understand way. When reviewing the vulnerabilities it detects, it's also simple to follow what happened and trace the issue back properly.

Cons

Getting Contrast set up in our environment was a little challenging. Because our infrastructure is somewhat outdated, we had to rely on a deprecated package to make it work. The licensing for the RASP solution also turned out to be different from what we originally expected when we bought the product.

Pros

Between the broad product portfolio and the coverage it provides, this platform stands out in a very positive way. It goes beyond backend code analysis by also handling frontend analysis for widely used frameworks like React and Angular. Another big advantage is the pipeline configuration which brings everything together in one place since a lot of other products still don't offer that all-in-one setup.

Cons

One thing that would make it even better is having some type of log for vulnerabilities that were previously closed as remediated, fixed or not a problem. That would help clarify why Contrast later reopens them and marks them as reported again.

Pros

Contrast lets us monitor vulnerabilities accurately by application and it also shows the severity of each related issue.

Cons

I don't have any complaints about Contrast Security.

Pros

Getting started with it is simple and the platform is very user-friendly. The customer service team has also been consistently helpful. On top of that, the Contrast Dashboard gives a great overview of the organization's overall security posture.

Cons

Limited support for languages and frameworks is where the Contrast Scan tool stands right now though it still has room for improvement.