No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Contrast Security Assess excels in identifying vulnerabilities with high accuracy and a low rate of false positives, outperforming other tools.
It offers continuous monitoring and real-time vulnerability detection during application usage, integrating seamlessly into development processes.
Contrast Security Assess provides runtime analysis capabilities, delivering immediate feedback and enhancing application security significantly.
The tool has increased development efficiency by reducing time spent on manual assessments and offering faster identification of code issues.
It has improved the overall security posture of companies, enabling proactive issue resolution and gaining customer trust.

CONS

Contrast's support for technology upgrades requires downloading new files, leading to cumbersome change management.
Contrast's troubleshooting relies on cumbersome log files, offering limited support for issue resolution.
Contrast lacks support for all technologies in use, particularly PHP, affecting instrumentation capabilities.
Contrast's retesting and vulnerability fix suggestions need enhancement for better user experience.
Contrast offers limited details on third-party library vulnerabilities and insufficient reporting capabilities.
 

Contrast Security Assess Pros review quotes

Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Jul 23, 2026
You cannot get much better than Contrast Security Assess for large deployments of applications and also critical applications.
reviewer2884320 - PeerSpot reviewer
Management Of Quality Managers at a tech vendor with 1,001-5,000 employees
Aug 3, 2026
Contrast Security Assess has positively impacted my organization by providing more control over secure software development.
reviewer2882520 - PeerSpot reviewer
Postdoctoral Research Fellow at a program development consultancy with 1-10 employees
Jul 31, 2026
Contrast Security Assess has positively impacted my organization by improving the security features of our application.
Learn what your peers think about Contrast Security Assess. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
917,433 professionals have used our research since 2012.
reviewer2902962 - PeerSpot reviewer
Senior Application Security Engineer at a healthcare company with 1,001-5,000 employees
Sep 25, 2026
Contrast Security Assess has positively impacted my organization by providing a good way to find issues faster than regular static scanning, which after a while was unable to really find anything, giving us more visibility on the real code that is used in production along with the active DLLs that were loaded by our application in the backend, which helped us identify where the risk could be.
Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Nov 27, 2023
When we access the application, it continuously monitors and detects vulnerabilities.
ToddMcAlister - PeerSpot reviewer
Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees
Aug 1, 2022
Assess has an excellent API interface to pull APIs.
AK
Senior Manager of Information Security at Kaizen Gaming
May 2, 2023
I am impressed with the product's identification of alerts and vulnerabilities.
reviewer1605099 - PeerSpot reviewer
Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees
Jun 24, 2021
The solution is very accurate in identifying vulnerabilities. In cases where we are performing application assessment using Contrast Assess, and also using legacy application security testing tools, Contrast successfully identifies the same vulnerabilities that the other tools have identified but it also identifies significantly more. In addition, it has visibility into application components that other testing methodologies are unaware of.
AK
Technical Information Security Team Lead at Kaizen Gaming
Sep 14, 2020
In our most critical applications, we have a deep dive in the code evaluation, which was something we usually did with periodic vulnerability assessments, code reviews, etc. Now, we have real time access to it. It's something that has greatly enhanced our code's quality. We have actually embedded a KPI in regards to the improvement of our code shell. For example, Contrast provides a baseline where libraries and the usability of the code are evaluated, and they produce a score. We always aim to improve that score. On a quarterly basis, we have added this to our KPIs.
RR
Senior Security Architect at a tech services company with 5,001-10,000 employees
Jun 7, 2020
We use the Contrast OSS feature that allows us to look at third-party, open-source software libraries, because it has a cool interface where you can look at all the different libraries. It has some really cool additional features where it gives us how many instances in which something has been used... It tells us it has been used 10 times out of 20 workloads, for example. Then we know for sure that OSS is being used.
 

Contrast Security Assess Cons review quotes

Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Jul 23, 2026
I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries.
reviewer2884320 - PeerSpot reviewer
Management Of Quality Managers at a tech vendor with 1,001-5,000 employees
Aug 3, 2026
Regarding Contrast Security Assess's AI capabilities, I think they are missing a huge opportunity because they could lead the way in automatic testing and AI security testing, but currently, they do not offer this functionality, which is a shame.
reviewer2882520 - PeerSpot reviewer
Postdoctoral Research Fellow at a program development consultancy with 1-10 employees
Jul 31, 2026
I think Contrast can also integrate with some AI tools and provide chat features if possible, so in case we have any more questions, we can chat with that chatbot and get remediations, which I believe would be a better enhancement to Contrast.
Learn what your peers think about Contrast Security Assess. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
917,433 professionals have used our research since 2012.
reviewer2902962 - PeerSpot reviewer
Senior Application Security Engineer at a healthcare company with 1,001-5,000 employees
Sep 25, 2026
I would rate Contrast Security Assess a seven out of ten because I think it's a good product, better than average, but I'm sure it has a lot of room for growth.
Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Nov 27, 2023
The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities.
ToddMcAlister - PeerSpot reviewer
Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees
Aug 1, 2022
The out-of-the-box reporting could be improved. We need to write our own APIs to make the reporting more robust.
AK
Senior Manager of Information Security at Kaizen Gaming
May 2, 2023
The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes.
reviewer1605099 - PeerSpot reviewer
Director of Threat and Vulnerability Management at a consultancy with 10,001+ employees
Jun 24, 2021
To instrument an agent, it has to be running on a type of application technology that the agent recognizes and understands. It's excellent when it works. If we're using an application that is using an unsupported technology, then we can't instrument it at all. We do use PHP and Contrast presently doesn't support that, although it's on their roadmap. My primary hurdle is that it doesn't support all of the technologies that we use.
AK
Technical Information Security Team Lead at Kaizen Gaming
Sep 14, 2020
Personalization of the board and how to make it appealing to an organization is something that could be done on their end. The reports could be adaptable to the customer's preferences.
RR
Senior Security Architect at a tech services company with 5,001-10,000 employees
Jun 7, 2020
Contrast Security Assess covers a wide range of applications like .NET Framework, Java, PSP, Node.js, etc. But there are some like Ubuntu and the .NET Core which are not covered. They have it in their roadmap to have these agents. If they have that, we will have complete coverage.