No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Contrast Security Assess demonstrates superior accuracy in identifying vulnerabilities, outperforming other tools in finding impactful vulnerabilities with a low false positive rate.
Real-time monitoring facilitated by Contrast Security Assess provides continuous vulnerability detection without waiting for scans to complete.
Contrast Security Assess has significantly reduced development time and improved code quality by delivering immediate feedback and insights into code evaluation.
Contrast Security Assess's unique runtime analysis capabilities effectively improve an organization's overall security posture, gaining trust from customers.
Contrast Security Assess has resulted in considerable cost savings, lowering expenses by providing security feedback to developers instantly and efficiently managing large-scale deployments.

CONS

Contrast's update support for deployed agents is limited, requiring cumbersome manual downloads and updates, particularly for Java environments.
Support and troubleshooting are hindered by the reliance on cumbersome log files.
There is limited technology support, impacting the ability to instrument agents on unsupported platforms like PHP.
The reporting and dashboard experience needs improvement, with a lack of robust out-of-the-box reporting and inadequate scanning rules.
Flexibility and scalability present challenges, especially from a commercial standpoint.
 

Contrast Security Assess Pros review quotes

Eucharia Okafor - PeerSpot reviewer
Dev Ops Engineer at a tech vendor with 1,001-5,000 employees
Jun 12, 2026
Security feedback comes to developers instantly with Contrast Security Assess, reducing costs by about 50%.
Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Jul 23, 2026
You cannot get much better than Contrast Security Assess for large deployments of applications and also critical applications.
reviewer2884320 - PeerSpot reviewer
Management Of Quality Managers at a tech vendor with 1,001-5,000 employees
Aug 3, 2026
Contrast Security Assess has positively impacted my organization by providing more control over secure software development.
Learn what your peers think about Contrast Security Assess. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
908,834 professionals have used our research since 2012.
reviewer2882520 - PeerSpot reviewer
Postdoctoral Research Fellow at a program development consultancy with 1-10 employees
Jul 31, 2026
Contrast Security Assess has positively impacted my organization by improving the security features of our application.
ToddMcAlister - PeerSpot reviewer
Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees
Aug 1, 2022
Assess has an excellent API interface to pull APIs.
Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Nov 27, 2023
When we access the application, it continuously monitors and detects vulnerabilities.
reviewer1605099 - PeerSpot reviewer
Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees
Jun 24, 2021
The solution is very accurate in identifying vulnerabilities. In cases where we are performing application assessment using Contrast Assess, and also using legacy application security testing tools, Contrast successfully identifies the same vulnerabilities that the other tools have identified but it also identifies significantly more. In addition, it has visibility into application components that other testing methodologies are unaware of.
AK
Senior Manager of Information Security at Kaizen Gaming
May 2, 2023
I am impressed with the product's identification of alerts and vulnerabilities.
AK
Technical Information Security Team Lead at Kaizen Gaming
Sep 14, 2020
In our most critical applications, we have a deep dive in the code evaluation, which was something we usually did with periodic vulnerability assessments, code reviews, etc. Now, we have real time access to it. It's something that has greatly enhanced our code's quality. We have actually embedded a KPI in regards to the improvement of our code shell. For example, Contrast provides a baseline where libraries and the usability of the code are evaluated, and they produce a score. We always aim to improve that score. On a quarterly basis, we have added this to our KPIs.
RR
Senior Security Architect at a tech services company with 5,001-10,000 employees
Jun 7, 2020
We use the Contrast OSS feature that allows us to look at third-party, open-source software libraries, because it has a cool interface where you can look at all the different libraries. It has some really cool additional features where it gives us how many instances in which something has been used... It tells us it has been used 10 times out of 20 workloads, for example. Then we know for sure that OSS is being used.
 

Contrast Security Assess Cons review quotes

Eucharia Okafor - PeerSpot reviewer
Dev Ops Engineer at a tech vendor with 1,001-5,000 employees
Jun 12, 2026
Contrast Security Assess could improve in the reporting and the dashboard experience.
Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Jul 23, 2026
I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries.
reviewer2884320 - PeerSpot reviewer
Management Of Quality Managers at a tech vendor with 1,001-5,000 employees
Aug 3, 2026
Regarding Contrast Security Assess's AI capabilities, I think they are missing a huge opportunity because they could lead the way in automatic testing and AI security testing, but currently, they do not offer this functionality, which is a shame.
Learn what your peers think about Contrast Security Assess. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
908,834 professionals have used our research since 2012.
reviewer2882520 - PeerSpot reviewer
Postdoctoral Research Fellow at a program development consultancy with 1-10 employees
Jul 31, 2026
I think Contrast can also integrate with some AI tools and provide chat features if possible, so in case we have any more questions, we can chat with that chatbot and get remediations, which I believe would be a better enhancement to Contrast.
ToddMcAlister - PeerSpot reviewer
Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees
Aug 1, 2022
The out-of-the-box reporting could be improved. We need to write our own APIs to make the reporting more robust.
Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Nov 27, 2023
The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities.
reviewer1605099 - PeerSpot reviewer
Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees
Jun 24, 2021
To instrument an agent, it has to be running on a type of application technology that the agent recognizes and understands. It's excellent when it works. If we're using an application that is using an unsupported technology, then we can't instrument it at all. We do use PHP and Contrast presently doesn't support that, although it's on their roadmap. My primary hurdle is that it doesn't support all of the technologies that we use.
AK
Senior Manager of Information Security at Kaizen Gaming
May 2, 2023
The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes.
AK
Technical Information Security Team Lead at Kaizen Gaming
Sep 14, 2020
Personalization of the board and how to make it appealing to an organization is something that could be done on their end. The reports could be adaptable to the customer's preferences.
RR
Senior Security Architect at a tech services company with 5,001-10,000 employees
Jun 7, 2020
Contrast Security Assess covers a wide range of applications like .NET Framework, Java, PSP, Node.js, etc. But there are some like Ubuntu and the .NET Core which are not covered. They have it in their roadmap to have these agents. If they have that, we will have complete coverage.