Contrast Assess is an application security testing tool that combines Static Application Security Testing, Dynamic Application Security Testing, and Interactive Application Security Testing approaches to identify security vulnerabilities in applications. The product uses an agent that instruments the running application with sensors that monitor the application's code execution, data flow, and configuration in real time during execution. This Interactive Application Security Testing approach identifies vulnerable lines of code and reduces false positives compared to standalone Static Application Security Testing or Dynamic Application Security Testing. Assess operates in environments such as test, QA, or staging servers, and on developer workstations. Developers receive security feedback that identifies vulnerable lines of code and remediation guidance within their IDE, test, or QA environments. Contrast Assess is a passive Interactive Application Security Testing solution that monitors applications through regular traffic.
