Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Modern software development must be as fast as the business. The modern AppSec toolbox lacks integration, which creates complexity that slows down software development life cycles. Contrast reduces the complexity that hinders today's development teams. Legacy AppSec uses a single-size-fits all approach to vulnerability detection and remediation that is inefficient, costly, and expensive. Contrast automatically applies the most efficient analysis and remediation technique, greatly improving efficiency and effectiveness. Separate AppSec tools can create silos that hinder the collection of actionable intelligence across an application attack surface. Contrast provides centralized observability, which is crucial for managing risks and capitalizing upon operational efficiencies. This is both for security and development teams. Contrast Scan is a pipeline native product that delivers the speed, accuracy and integration required for modern software development.

Description

Scribe continuously attests to your software's security and trustworthiness: ✓ Centralized SBOM Management Platform – Create, manage and share SBOMs along with their security aspects: vulnerabilities, VEX advisories, licences, reputation, exploitability, scorecards, etc. ✓ Build and deploy secure software – Detect tampering by continuously sign and verify source code, container images, and artifacts throughout every stage of your CI/CD pipelines ✓ Automate and simplify SDLC security – Control the risk in your software factory and ensure code trustworthiness by translating security and business logic into automated policy, enforced by guardrails ✓ Enable transparency. Improve delivery speed – Empower security teams with the capabilities to exercise their responsibility, streamlining security control without impeding dev team deliverables ✓ Enforce policies. Demonstrate compliance – Monitor and enforce SDLC policies and governance to enhance software risk posture and demonstrate the compliance necessary for your business

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

GitHub Yes 
GitLab Yes 
Jenkins Yes 
.NET Yes 
5X Yes 
Amazon Redshift Yes 
Apache Maven Yes 
CircleCI No 
CycloneDX Yes 
Docker Yes 
Go Yes 
Gradle Yes 
Helm Yes 
JavaScript Yes 
Kubernetes Yes 
Maverix Yes 
Microsoft Azure Yes 
Microsoft Entra ID No 
Panaseer Yes 
Splunk Cloud Platform Yes 

Integrations

GitHub Yes 
GitLab Yes 
Jenkins Yes 
.NET No 
5X No 
Amazon Redshift No 
Apache Maven No 
CircleCI Yes 
CycloneDX No 
Docker No 
Go No 
Gradle No 
Helm No 
JavaScript No 
Kubernetes No 
Maverix No 
Microsoft Azure No 
Microsoft Entra ID Yes 
Panaseer No 
Splunk Cloud Platform No 

Pricing Details

$0
Pricing is flexible with options to license by developer or license specific products within the platform.
Free Trial Yes 
Free Version Yes 

Pricing Details

Free
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Contrast Security

Founded

2012

Country

United States

Website

www.contrastsecurity.com/platform

Vendor Details

Company Name

Scribe Security

Founded

2021

Country

Israel

Website

scribesecurity.com

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Automated Testing

Hierarchical View No 
Move & Copy No 
Parameterized Testing No 
Requirements-Based Testing No 
Security Testing Yes 
Supports Parallel Execution Yes 
Test Script Reviews No 
Unicode Compliance No 

Cloud Workload Protection

Anomaly Detection Yes 
Asset Discovery Yes 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) Yes 
Data Security Yes 
Governance No 
Logging & Reporting Yes 
Machine Learning No 
Security Audit Yes 
Workload Diversity No 

Static Application Security Testing (SAST)

Application Security Yes 
Dashboard Yes 
Debugging Yes 
Deployment Management Yes 
IDE Yes 
Multi-Language Scanning No 
Real-Time Analytics Yes 
Source Code Scanning Yes 
Vulnerability Scanning Yes 

Product Features

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

DevOps

Approval Workflow No 
Dashboard No 
KPIs No 
Policy Management No 
Portfolio Management No 
Prioritization No 
Release Management No 
Timeline Management No 
Troubleshooting Reports No 

Alternatives

Alternatives

Resurface Reviews

Resurface

Resurface Labs