← Directory
Contrast Security
IAST, RASP, and ADR that instrument the running app so exploits are seen in the code path, not the packet.
Proof of life. Published the Software Under Siege 2025 report on application-layer attacks, August 2025
Contrast places sensors in the application runtime to watch how data actually flows through Java, .NET, and Node, which is IAST in build and RASP or ADR in prod. CVE Shield is the virtual-patch path: block a live exploit class in minutes while the library upgrade is still in the sprint. That is the original RASP idea, updated for AI-generated code that no SAST rule has seen yet.
- Category
- API and runtime
- Headquarters
- Los Altos, United States
- Country
- United States
- Founded
- 2014
- Funding stage
- Series E
- Total funding
- $269M
- Website
- https://www.contrastsecurity.com
Investors
Warburg PincusLiberty Strategic Capital
Tags
Series EUnited States
Proof-of-life verified against this source. Outbound clicks are tokenized for directory analytics.