Try our new research platform with insights from 80,000+ expert users
Contrast Security Assess Logo

Contrast Security Assess Reviews

Vendor: Contrast Security
4.4 out of 5
Leave a review

What is Contrast Security Assess?

Contrast Security is the world’s leading provider of security technology that enables software applications to protect themselves against cyberattacks, heralding the new era of self-protecting software. Contrast's patented deep security instrumentation is the breakthrough technology that enables highly accurate assessment and always-on protection of an entire application portfolio, without disruptive scanning or expensive security experts. Only Contrast has sensors that work actively inside applications to uncover vulnerabilities, prevent data breaches, and secure the entire enterprise from development, to operations, to production.

Get the Contrast Security Assess Buyer's Guide and find out what your peers are saying about Contrast Security Assess, SonarQube Server (formerly SonarQube), GitLab and more!
Contrast Security Assess is the #26 ranked solution in AST tools and #27 ranked solution in application security solutions. PeerSpot users give Contrast Security Assess an average rating of 8.8 out of 10. Contrast Security Assess is most commonly compared to SonarQube Server (formerly SonarQube): Contrast Security Assess vs SonarQube Server (formerly SonarQube). Contrast Security Assess is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 22% of all views.
Buyer's Guide
Contrast Security Assess
August 2025
Get the report
Helped 866,088 peers since 2012

Featured Contrast Security Assess reviews

Read more reviews

Contrast Security Assess mindshare

Product category:
Static Application Security Testing (...
As of August 2025, the mindshare of Contrast Security Assess in the Static Application Security Testing (SAST) category stands at 0.5%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Contrast Security Assess0.5%
SonarQube Server (formerly SonarQube)22.1%
Checkmarx One10.0%
Other67.4%
Static Application Security Testing (SAST)

PeerResearch reports based on Contrast Security Assess reviews

TypeTitleDate
CategoryStatic Application Security Testing (SAST)Aug 28, 2025Download
ProductReviews, tips, and advice from real usersAug 28, 2025Download
ComparisonContrast Security Assess vs SonarQube Server (formerly SonarQube)Aug 28, 2025Download
ComparisonContrast Security Assess vs VeracodeAug 28, 2025Download
ComparisonContrast Security Assess vs Checkmarx OneAug 28, 2025Download
Suggested products
TitleRatingMindshareRecommending
SonarQube Server (formerly SonarQube)4.022.1%81%116 interviewsAdd to research
GitLab4.22.4%97%85 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Contrast Security Assess excels in identifying vulnerabilities accurately with minimal false positives, outperforming other tools. It provides real-time vulnerability detection and comprehensive stack trace details, aiding in timely fixes. The tool's integration into the development process enhances efficiency and incorporates security elements seamlessly. It also offers valuable features like third-party library monitoring, PCI compliance reports, and robust automation, significantly reducing the time and effort spent on vulnerability management.
  • "When we access the application, it continuously monitors and detects vulnerabilities."
  • "It is a stable solution...Contrast Security Assess is one of the first players in this market, so they have experience and customers, especially abroad. Overall, it's a good product."
  • "I am impressed with the product's identification of alerts and vulnerabilities."

Room for Improvement

Contrast Security Assess needs improvements in documentation and plugin integration. It lacks support for some technologies like .NET Core on Ubuntu and PHP. Users desire better scanning rules, client-side support, and more intuitive reporting. Technical support speed and onboarding processes could be enhanced. There's a need for better vulnerability fixes and ecosystem flexibility. Updates involve cumbersome downloads, and personalization options for reporting and dashboards could be improved for large organizations.
  • "The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities."
  • "The solution needs to improve flexibility...The scalability of the product is a problem in the solution, especially from a commercial perspective."
  • "The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes."

ROI

Several organizations have observed a return on investment with Contrast Security Assess. Contrast aids in securing key revenue-driving applications and reduces the attack surface by identifying vulnerabilities early in development. Continuous scanning allows teams to address software defects before production. Time savings occur for both security and development teams, as they handle fewer false positives and focus on actionable results. Code quality improves through reduced code use and streamlined processes.

Pricing

Contrast Security Assess pricing is straightforward, focusing on per-application licensing without regard to application size, making it ideal for large, monolithic applications. Enterprise buyers note that while pricing is industry-standard, it may not scale well in highly clustered environments. The tiered model allows flexibility with a pay-per-application system, benefitting environments with fewer onboarded applications. Developer licenses are sometimes required, leading to potential additional costs. Overall, the pricing is considered reasonable for its features.
  • "The solution is expensive."
  • "The product's pricing is low. I would rate it a two out of ten."
  • "It's a tiered licensing model. The more you buy, as you cross certain quantity thresholds, the pricing changes. If you have a smaller environment, your licensing costs are going to be different than a larger environment... The licensing is primarily per application. An application can be as many agents as you need. If you've got 10 development servers and 20 production servers and 50 QA servers, all of those agents can be reporting as a single application that utilizes one license."

Popular Use Cases

Contrast Security Assess is primarily used for enhancing security around legacy applications, providing application vulnerability scanning and pen-testing. It integrates into developer workflows for immediate vulnerability identification, supports multiple programming languages, and offers continuous monitoring. It operates on a cloud-hosted platform where data is aggregated, analyzed, and interacted with. Assess has improved visibility for code testing and includes features like secure source code analysis, providing detailed information about web application vulnerabilities and third-party library CVEs.

Service and Support

Contrast Security Assess provides responsive and helpful support, with quick response times and knowledgeable staff. Many users appreciate their enthusiastic and accommodating team, noting rapid responses to inquiries. Some have experienced delays in comprehending custom requests, but most find communication efficient. Despite some challenges with troubleshooting via cumbersome log files, the technical support is generally rated positively, often resolving issues promptly through web or email submissions. Contrast is recognized for its top-tier standard support.

Deployment

Initial setup for Contrast Security Assess is straightforward for many, involving adding the jar file to JVM arguments. Instructions are clear, but deployment varies by organization size and complexity. While some complete setup quickly, larger environments take longer due to multiple teams and applications. Users highlight easy integration with Java, .NET, and PCF, though automation is challenging due to varied applications. Maintenance involves collaboration with different teams, focusing on agent deployment and data management.

Scalability

Contrast Security Assess exhibits strong scalability, integrating well with various applications regardless of complexity. It allows widespread deployment across different environments, both cloud and on-premises. While some challenges exist in automation and technology support, organizations can scale efficiently with a robust change-management strategy. The ability to expand usage across multiple teams is significant, but requires initial setup and familiarization by key personnel. Development teams are gradually adapting to the platform due to its comprehensive application security features.

Stability

Contrast Security Assess exhibits significant stability, with most users experiencing minimal downtime and effective support. Some challenges arise from unsupported applications like ColdFusion and occasional performance impacts on specific applications. However, many find it reliable once deployed, with maintenance and monitoring streamlined. Assess performs well in preproduction and is robust for development sites. Users appreciate its smooth operation, high stability, and efficient handling of traffic.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Contrast Security Assess Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business2
Midsize Enterprise3
Large Enterprise6
By reviewers
By visitors reading reviews
Company SizeCount
Small Business45
Midsize Enterprise20
Large Enterprise114
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
22%
Manufacturing Company
11%
Computer Software Company
9%
Insurance Company
8%
Retailer
5%
Performing Arts
4%
Government
4%
Comms Service Provider
4%
Non Profit
4%
Construction Company
4%
Educational Organization
3%
Healthcare Company
3%
Energy/Utilities Company
3%
Hospitality Company
3%
Pharma/Biotech Company
2%
Real Estate/Law Firm
2%
Media Company
1%
Consumer Goods Company
1%
Legal Firm
1%
Outsourcing Company
1%
University
1%
Recreational Facilities/Services Company
1%
Logistics Company
1%
Wellness & Fitness Company
1%
Venture Capital & Private Equity Firm
1%
Renewables & Environment Company
1%

Compare Contrast Security Assess with alternative products

Go!

Learn more about Contrast Security Assess

Contrast Security Assess was previously known as Contrast Assess.

Contrast Security Assess customers

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.

Related questions

  • 11
What Application Security Solution Do You Use That Is DevOps Friendly?
  • 17
Which is the most comprehensive open source Web Security Testing tool?
  • 69
What is the best Application Security Testing platform?
  • 9
When evaluating Application Security Testing, what aspect do you think is the most important to look for?
  • 23
SAST vs. DAST: Which is better for application security testing?
  • 34
What tools do you rely on for building a DevSecOps pipeline?
  • 40
What does the Log4j/Log4Shell vulnerability mean for your company?
  • 42
Checkmarx or Veracode. Which should we choose?
  • 65
What are your recommended automated penetration testing tools?
  • 22
What are the OWASP top 10 in 2020?

Product Categories

Product Categories
Static Application Security Testing (SAST)
Application Security Tools

Popular Comparisons

Popular Comparisons
SonarQube Server (formerly SonarQube) vs Contrast Security Assess Logo
SonarQube Server (formerly SonarQube) vs Contrast Security Assess
GitLab vs Contrast Security Assess Logo
GitLab vs Contrast Security Assess
Snyk vs Contrast Security Assess Logo
Snyk vs Contrast Security Assess
Checkmarx One vs Contrast Security Assess Logo
Checkmarx One vs Contrast Security Assess
Veracode vs Contrast Security Assess Logo
Veracode vs Contrast Security Assess
Coverity vs Contrast Security Assess Logo
Coverity vs Contrast Security Assess
Mend.io vs Contrast Security Assess Logo
Mend.io vs Contrast Security Assess
CrowdStrike Falcon Cloud Security vs Contrast Security Assess Logo
CrowdStrike Falcon Cloud Security vs Contrast Security Assess
GitHub Advanced Security vs Contrast Security Assess Logo
GitHub Advanced Security vs Contrast Security Assess
OpenText Core Application Security vs Contrast Security Assess Logo
OpenText Core Application Security vs Contrast Security Assess
OWASP Zap vs Contrast Security Assess Logo
OWASP Zap vs Contrast Security Assess
Acunetix vs Contrast Security Assess Logo
Acunetix vs Contrast Security Assess
Sonatype Lifecycle vs Contrast Security Assess Logo
Sonatype Lifecycle vs Contrast Security Assess
HCL AppScan vs Contrast Security Assess Logo
HCL AppScan vs Contrast Security Assess
PortSwigger Burp Suite Professional vs Contrast Security Assess Logo
PortSwigger Burp Suite Professional vs Contrast Security Assess
See all alternatives
 
Contrast Security Assess Reviews Summary
Author infoRatingReview Summary
Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees4.0No summary available
CyberRisk Solution Advisor at a consultancy with 10,001+ employees4.0I find Contrast Security Assess effective for detailed vulnerability insights, especially in web applications and third-party libraries. It identifies issues by file and line but needs faster support and more detailed CVE analysis. Initial setup could also be simplified.
Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees4.0No summary available
Senior Manager of Information Security at Kaizen Gaming5.0We use Contrast Security Assess to evaluate our customer-facing apps, identifying vulnerabilities and improving code quality. Though the retesting and vulnerability fix suggestions need enhancement, the tool's quick detection and developer-friendly pricing led us to choose it over others.
Technical Information Security Team Lead at Kaizen Gaming4.5No summary available
Senior Security Architect at a tech services company with 5,001-10,000 employees4.5No summary available
Manager at a consultancy with 10,001+ employees4.0No summary available
Director of Innovation at a tech services company with 1-10 employees4.0No summary available