Contrast Assess is an Interactive Application Security Testing (IAST) solution that utilizes an agent to instrument running applications and APIs with sensors. These sensors continuously monitor code execution, data flow, and configurations in real-time to identify vulnerabilities across custom code, open-source libraries, and frameworks. The platform combines static and dynamic analysis techniques from within the application, enabling the software to assess itself for security risks and pinpoint exploitable lines of code.
The tool provides security feedback and remediation guidance within integrated development (IDE), test, and quality assurance (QA) environments. By integrating with Software Composition Analysis (SCA), Contrast Assess provides runtime context to determine if vulnerable methods in third-party libraries are actively called by the application. This function allows for the prioritization of vulnerabilities based on active risk observed during the application's execution.
