Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Modern software development must be as fast as the business. The modern AppSec toolbox lacks integration, which creates complexity that slows down software development life cycles. Contrast reduces the complexity that hinders today's development teams. Legacy AppSec uses a single-size-fits all approach to vulnerability detection and remediation that is inefficient, costly, and expensive. Contrast automatically applies the most efficient analysis and remediation technique, greatly improving efficiency and effectiveness. Separate AppSec tools can create silos that hinder the collection of actionable intelligence across an application attack surface. Contrast provides centralized observability, which is crucial for managing risks and capitalizing upon operational efficiencies. This is both for security and development teams. Contrast Scan is a pipeline native product that delivers the speed, accuracy and integration required for modern software development.
Description
PT Application Inspector stands out as the sole source code analyzer that offers top-tier analysis along with efficient tools for the automatic verification of vulnerabilities, which greatly accelerates the report handling process and enhances collaboration between security experts and developers. By integrating static, dynamic, and interactive application security testing (SAST + DAST + IAST), it achieves results that are unmatched in the industry. This tool focuses exclusively on genuine vulnerabilities, allowing users to concentrate on the critical issues that truly require attention. Its distinctive features, such as precise detection, automatic validation of vulnerabilities, filtering capabilities, incremental scanning, and an interactive data flow diagram (DFD) for each identified vulnerability, significantly expedite the remediation process. By minimizing vulnerabilities in the end product, it also reduces the associated repair costs. Furthermore, it enables analysis to be conducted at the earliest phases of software development, ensuring that security is prioritized from the start. This proactive approach not only streamlines development but also enhances the overall quality and security of applications.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Jenkins
Yes
Jira
Yes
5X
Yes
Amazon Redshift
Yes
Amazon Web Services (AWS)
Yes
Apache Maven
Yes
ArmorCode
Yes
CycloneDX
Yes
Datadog
Yes
Docker
Yes
Integrations
Jenkins
Yes
Jira
Yes
5X
No
Amazon Redshift
No
Amazon Web Services (AWS)
No
Apache Maven
No
ArmorCode
No
CycloneDX
No
Datadog
No
Docker
No
Pricing Details
$0
Pricing is flexible with options to license by developer or license specific products within the platform.
Free Trial
Yes
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Contrast Security
Founded
2012
Country
United States
Website
www.contrastsecurity.com/platform
Vendor Details
Company Name
Positive Technologies
Founded
2002
Country
United Kingdom
Website
www.ptsecurity.com/ww-en/products/ai/
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
Yes
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Automated Testing
Hierarchical View
No
Move & Copy
No
Parameterized Testing
No
Requirements-Based Testing
No
Security Testing
Yes
Supports Parallel Execution
Yes
Test Script Reviews
No
Unicode Compliance
No
Cloud Workload Protection
Anomaly Detection
Yes
Asset Discovery
Yes
Cloud Gap Analysis
No
Cloud Registry
No
Data Loss Prevention (DLP)
Yes
Data Security
Yes
Governance
No
Logging & Reporting
Yes
Machine Learning
No
Security Audit
Yes
Workload Diversity
No
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
Yes
Debugging
Yes
Deployment Management
Yes
IDE
Yes
Multi-Language Scanning
No
Real-Time Analytics
Yes
Source Code Scanning
Yes
Vulnerability Scanning
Yes
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
No
Vulnerability Remediation
No
Source Code Management
Access Controls/Permissions
No
Bug Tracking
No
Build Automation
No
Change Management
No
Code Review
No
Collaboration
No
Continuous Integration
No
Repository Management
No
Version Control
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Vulnerability Management
Asset Discovery
No
Asset Tagging
No
Network Scanning
No
Patch Management
No
Policy Management
No
Prioritization
No
Risk Management
No
Vulnerability Assessment
No
Web Scanning
No
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No