Contrast Assess (IAST/DAST)

Agent-Based Instrumentation

Uses an agent that instruments the running application with sensors, performing deep security instrumentation at runtime as program code loads into memory

Hybrid Security Testing Approach

Combines Static (SAST), Dynamic (DAST), and Interactive Application Security Testing (IAST) approaches with static and dynamic analysis from within the application

Contrast TeamServer Architecture

Operates under a command and control architecture with Contrast TeamServer as centralized server, available as SaaS offering or can be deployed on-premises

Passive IAST Monitoring

Primarily a passive IAST solution that continuously monitors application through regular traffic, eliminating the need for time-wasting security scans

Real-Time Code Monitoring

Sensors continuously monitor the application's code execution, data flow, and configuration in real time