Contrast Security
IAST, RASP, and ADR that instrument the running app so exploits are seen in the code path, not the packet.
Proof of life. Published the Software Under Siege 2025 report on application-layer attacks, August 2025
About Contrast Security
Contrast places sensors in the application runtime to watch how data actually flows through Java, .NET, and Node, which is IAST in build and RASP or ADR in prod.
CVE Shield is the virtual-patch path: block a live exploit class in minutes while the library upgrade is still in the sprint. That is the original RASP idea, updated for AI-generated code that no SAST rule has seen yet.
Investors
Warburg PincusLiberty Strategic Capital
Work at Contrast Security? Link to this listing
Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.
<a href="https://securitystartups.com/companies/contrast-security"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>