Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Modern software development must be as fast as the business. The modern AppSec toolbox lacks integration, which creates complexity that slows down software development life cycles. Contrast reduces the complexity that hinders today's development teams. Legacy AppSec uses a single-size-fits all approach to vulnerability detection and remediation that is inefficient, costly, and expensive. Contrast automatically applies the most efficient analysis and remediation technique, greatly improving efficiency and effectiveness. Separate AppSec tools can create silos that hinder the collection of actionable intelligence across an application attack surface. Contrast provides centralized observability, which is crucial for managing risks and capitalizing upon operational efficiencies. This is both for security and development teams. Contrast Scan is a pipeline native product that delivers the speed, accuracy and integration required for modern software development.

Description

Modern development teams are empowered to identify, fix, and prevent vulnerabilities in source code, open-source libraries, secret management, cloud configuration, and other areas. Modern development teams are empowered to identify, fix, and prevent security flaws in their applications. Continuous security scanning speeds up feature shipping and reduces cycle time. Our expert system reduces false alarms and only informs you about security issues that are relevant. Software that is consistently scanned across all product lines will be more secure. GuardRails integrates seamlessly with modern Version Control Systems such as GitLab and Github. GuardRails automatically selects the appropriate security engines to run based upon the languages found in a repository. Each rule is carefully curated to determine whether it has a high level security impact issue. This results in less noise. A system has been developed that detects false positives and is constantly improved to make it more accurate.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

GitHub Yes 
GitLab Yes 
Go Yes 
Java Yes 
JavaScript Yes 
Jira Yes 
Python Yes 
5X Yes 
Angular No 
Ansible No 
Docker Yes 
Gradle Yes 
Jenkins Yes 
Microsoft Azure Yes 
Microsoft Teams Yes 
Silk Security Yes 
Slack Yes 
Splunk Cloud Platform Yes 
Swift No 
Visual Studio Code Yes 

Integrations

GitHub Yes 
GitLab Yes 
Go Yes 
Java Yes 
JavaScript Yes 
Jira Yes 
Python Yes 
5X No 
Angular Yes 
Ansible Yes 
Docker No 
Gradle No 
Jenkins No 
Microsoft Azure No 
Microsoft Teams No 
Silk Security No 
Slack No 
Splunk Cloud Platform No 
Swift Yes 
Visual Studio Code No 

Pricing Details

$0
Pricing is flexible with options to license by developer or license specific products within the platform.
Free Trial Yes 
Free Version Yes 

Pricing Details

$35 per user per month
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Contrast Security

Founded

2012

Country

United States

Website

www.contrastsecurity.com/platform

Vendor Details

Company Name

GuardRails

Founded

2017

Country

Singapore

Website

www.guardrails.io

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Automated Testing

Hierarchical View No 
Move & Copy No 
Parameterized Testing No 
Requirements-Based Testing No 
Security Testing Yes 
Supports Parallel Execution Yes 
Test Script Reviews No 
Unicode Compliance No 

Cloud Workload Protection

Anomaly Detection Yes 
Asset Discovery Yes 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) Yes 
Data Security Yes 
Governance No 
Logging & Reporting Yes 
Machine Learning No 
Security Audit Yes 
Workload Diversity No 

Static Application Security Testing (SAST)

Application Security Yes 
Dashboard Yes 
Debugging Yes 
Deployment Management Yes 
IDE Yes 
Multi-Language Scanning No 
Real-Time Analytics Yes 
Source Code Scanning Yes 
Vulnerability Scanning Yes 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Alternatives

Alternatives

Resurface Reviews

Resurface

Resurface Labs
CodeSonar Reviews

CodeSonar

CodeSecure