Contrast Security Platform

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Contrast Security Platform is ranked #1 of 15 in DevSecOps Platforms on Inferse. It runs on API, Linux, Web. There is a free plan. Paid plans start at $750/mo.

Compared on DevSecOps Platforms

Free plan: Yescontrastsecurity.com
Deployment model: hybridcontrastsecurity.com
Container scanning: Yescontrastsecurity.com
Remediation workflows: Yescontrastsecurity.com
SBOM management: Yescontrastsecurity.com
Compliance reporting: Yescontrastsecurity.com

Facts

Purpose: The runtime security platform identifies application and API vulnerabilities and detects or blocks attacks in real time using in-app technology.contrastsecurity.com · 3 Oct 2026
Product components: The platform includes ADR for attack detection and response and AST for application security testing, including Assess, SCA, and Scan.contrastsecurity.com · 3 Oct 2026
Contrast Graph: The Contrast Graph provides runtime intelligence and a unified real-time security model for applications and APIs.contrastsecurity.com · 3 Oct 2026
Remediation: Contrast says its AI SmartFix suggests and applies targeted code fixes and can integrate with preferred AI models through the Contrast MCP Server.contrastsecurity.com · 3 Oct 2026
Application coverage: The platform is described as covering third-party applications, custom code, and dependencies across development, staging, and production.contrastsecurity.com · 3 Oct 2026
Integrations: The maker lists SIEM and incident-response tools including Microsoft Sentinel, Splunk, Sumo Logic, and PagerDuty, plus CI/CD and build tools including Jenkins, Azure DevOps, Maven, Gradle, and GitHub.contrastsecurity.com · 3 Oct 2026
Custom integration: Contrast says customers can tailor workflows and build integrations using its SDKs and webhooks.contrastsecurity.com · 3 Oct 2026
Data collection: For Assess, Protect, Scan using Scan Local Engine, and SCA, the maker says source code and binaries do not leave customer servers; SaaS Scan and CodeSec are exceptions.contrastsecurity.com · 3 Oct 2026
Encryption: Contrast says service data is encrypted at rest and in transit, with TLS 1.2 for transit and AWS KMS with AES-256-GCM for stored backup data.contrastsecurity.com · 3 Oct 2026
Hosting: Contrast states its application security services and data are hosted on AWS facilities in the United States, Europe, the UK, and Japan.contrastsecurity.com · 3 Oct 2026
Free tier limits: The pricing page says the free CVE Shield tier is observation-only, supports Java applications running on Linux, and is metered at up to 12 services across two applications.contrastsecurity.com · 3 Oct 2026
Support: The listed support levels are community for Free, email for Pro, and standard support for Enterprise.contrastsecurity.com · 3 Oct 2026