Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Modern software development must be as fast as the business. The modern AppSec toolbox lacks integration, which creates complexity that slows down software development life cycles. Contrast reduces the complexity that hinders today's development teams. Legacy AppSec uses a single-size-fits all approach to vulnerability detection and remediation that is inefficient, costly, and expensive. Contrast automatically applies the most efficient analysis and remediation technique, greatly improving efficiency and effectiveness. Separate AppSec tools can create silos that hinder the collection of actionable intelligence across an application attack surface. Contrast provides centralized observability, which is crucial for managing risks and capitalizing upon operational efficiencies. This is both for security and development teams. Contrast Scan is a pipeline native product that delivers the speed, accuracy and integration required for modern software development.

Description

OpenText Core Application Security delivers a robust AppSec-as-a-service solution combining security testing, vulnerability management, and expert support to help organizations strengthen their software security assurance programs. It incorporates a wide array of testing methods—static (SAST), dynamic (DAST), and mobile application security testing (MAST)—embedded seamlessly into modern DevOps and Agile development pipelines to enable continuous security throughout the software lifecycle. The cloud-native platform removes on-premises infrastructure challenges, offering rapid scalability and accessibility to meet any organizational size and complexity. It regularly updates its rule packs to detect the latest vulnerabilities accurately while minimizing false positives, allowing developers to focus on critical issues. Users receive detailed vulnerability assessments along with prioritized remediation guidance and comprehensive reporting features to measure program progress. OpenText also provides training and education resources to foster a strong AppSec culture. The platform’s FedRAMP certification ensures compliance with government standards, making it suitable for public sector use. Supported by a dedicated team and technical account managers, it is recognized as a market leader by Gartner and others.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

.NET Yes 
5X Yes 
Amazon Redshift Yes 
ArmorCode Yes 
Axonius Yes 
CycloneDX Yes 
Docker Yes 
GitLab Yes 
Gradle Yes 
Helm Yes 
IBM Cloud Yes 
Java Yes 
JavaScript Yes 
Kubernetes Yes 
Microsoft Azure Yes 
Python Yes 
Slack Yes 
Sumo Logic Yes 
Visual Studio Yes 
Visual Studio Code Yes 

Integrations

.NET No 
5X No 
Amazon Redshift No 
ArmorCode No 
Axonius No 
CycloneDX No 
Docker No 
GitLab No 
Gradle No 
Helm No 
IBM Cloud No 
Java No 
JavaScript No 
Kubernetes No 
Microsoft Azure No 
Python No 
Slack No 
Sumo Logic No 
Visual Studio No 
Visual Studio Code No 

Pricing Details

$0
Pricing is flexible with options to license by developer or license specific products within the platform.
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Contrast Security

Founded

2012

Country

United States

Website

www.contrastsecurity.com/platform

Vendor Details

Company Name

OpenText

Founded

1991

Country

Canada

Website

www.opentext.com/products/fortify-on-demand

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Automated Testing

Hierarchical View No 
Move & Copy No 
Parameterized Testing No 
Requirements-Based Testing No 
Security Testing Yes 
Supports Parallel Execution Yes 
Test Script Reviews No 
Unicode Compliance No 

Cloud Workload Protection

Anomaly Detection Yes 
Asset Discovery Yes 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) Yes 
Data Security Yes 
Governance No 
Logging & Reporting Yes 
Machine Learning No 
Security Audit Yes 
Workload Diversity No 

Static Application Security Testing (SAST)

Application Security Yes 
Dashboard Yes 
Debugging Yes 
Deployment Management Yes 
IDE Yes 
Multi-Language Scanning No 
Real-Time Analytics Yes 
Source Code Scanning Yes 
Vulnerability Scanning Yes 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Alternatives

Alternatives

Resurface Reviews

Resurface

Resurface Labs
AppScan Reviews

AppScan

HCLSoftware