Contrast Serverless is an application security testing solution for serverless-based applications. The product uses cloud-native architecture to map resources within an environment while automatically validating and prioritizing results to reduce false-positive results and alert fatigue. It scans for vulnerabilities in custom code, such as injection attacks, dependencies including CVEs, and configuration risks like over-permissive function policies. Dynamic and static scans analyze code to discover weaknesses, data flows, attack surfaces, and exposure to vulnerabilities. Contrast connects to AWS accounts with ReadOnly access and uses this access to continuously monitor the environment and collect relevant information. Contrast deploys one Lambda function within the monitored environment to perform activities such as code analysis and sending metadata about scanned resources back to Contrast. The product supports Microsoft Azure Functions and enables scanning for security vulnerabilities across multi-cloud environments. Contrast Serverless provides security earlier in the software development lifecycle through dynamic scanning, resource mapping, and open-source code scanning.
