Contrast Runtime Security Platform

Contrast Security, Inc. states in its privacy policy that it is headquartered at 6800 Koll Center Parkway, Pleasanton, California, US; the pages fetched give no founding year. It focuses on runtime application security, instrumenting running applications to find and block attacks.

The Contrast Runtime Security Platform includes ADR (Application Detection and Response), CVE Shield and AST (Application and API Security Testing), which bundles Assess (IAST), SCA and Scan (SAST). Contrast One packages these capabilities. Backbase is the named customer on the home page.

• Contrast ADR: application detection and response for attacks at runtime.
• CVE Shield: runtime visibility and protection against vulnerable libraries.
• Assess (IAST): interactive testing from inside the running app.
• Scan (SAST) and SCA for code and dependency analysis.
• API security testing alongside application testing.
• Contrast One platform packaging.

A Vietnamese bank can instrument core Java services to see which vulnerable libraries are loaded. An e-commerce platform can use ADR to detect attacks against live checkout APIs.

• Runtime instrumentation observes real application behavior, not only static code.
• CVE Shield offers a free tier for runtime visibility into vulnerable libraries.
• IAST, SAST and SCA available in one AST product.
• Detection and response for attacks on running applications.

New library CVEs appear faster than teams can patch, so runtime visibility into what is actually loaded and exploitable gains value. Vietnamese banks and e-commerce firms running Java and .NET services can use runtime evidence to prioritize patches.

Contrast Security, Inc., Pleasanton, California, US (privacy policy). Launched CVE Shield on July 29, 2026 with a free tier.