Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Modern software development must be as fast as the business. The modern AppSec toolbox lacks integration, which creates complexity that slows down software development life cycles. Contrast reduces the complexity that hinders today's development teams. Legacy AppSec uses a single-size-fits all approach to vulnerability detection and remediation that is inefficient, costly, and expensive. Contrast automatically applies the most efficient analysis and remediation technique, greatly improving efficiency and effectiveness. Separate AppSec tools can create silos that hinder the collection of actionable intelligence across an application attack surface. Contrast provides centralized observability, which is crucial for managing risks and capitalizing upon operational efficiencies. This is both for security and development teams. Contrast Scan is a pipeline native product that delivers the speed, accuracy and integration required for modern software development.

Description

The versatile design of the Kondukto platform enables you to swiftly and effectively establish customized workflows for managing risks. You can leverage over 25 integrated open-source tools that are prepared to execute SAST, DAST, SCA, and Container Image scans in just minutes, all without requiring installation, upkeep, or updates. Safeguard your organizational knowledge against shifts in personnel, scanners, or DevOps tools. Centralize all security data, metrics, and activities in one location for your control. Prevent vendor lock-in and protect your historical data when transitioning to a different AppSec tool. Automatically validate fixes to foster better cooperation and minimize distractions. Enhance productivity by streamlining communications between AppSec and development teams, thus allowing them to focus on their core tasks. This holistic approach promotes a more agile response to evolving security challenges.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

.NET Yes 
GitHub Yes 
GitLab Yes 
Jenkins Yes 
Jira Yes 
Microsoft Teams Yes 
Slack Yes 
5X Yes 
Apache Maven Yes 
AppScan No 
Bitbucket No 
Invicti Web + API No 
JFrog Xray No 
Kubernetes Yes 
Node.js No 
Panaseer Yes 
Parasoft No 
Snyk No 
SonarQube Cloud No 
Visual Studio Yes 

Integrations

.NET Yes 
GitHub Yes 
GitLab Yes 
Jenkins Yes 
Jira Yes 
Microsoft Teams Yes 
Slack Yes 
5X No 
Apache Maven No 
AppScan Yes 
Bitbucket Yes 
Invicti Web + API Yes 
JFrog Xray Yes 
Kubernetes No 
Node.js Yes 
Panaseer No 
Parasoft Yes 
Snyk Yes 
SonarQube Cloud Yes 
Visual Studio No 

Pricing Details

$0
Pricing is flexible with options to license by developer or license specific products within the platform.
Free Trial Yes 
Free Version Yes 

Pricing Details

$12,000 per annually
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Contrast Security

Founded

2012

Country

United States

Website

www.contrastsecurity.com/platform

Vendor Details

Company Name

Kondukto

Founded

2019

Country

United States

Website

kondukto.io

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Automated Testing

Hierarchical View No 
Move & Copy No 
Parameterized Testing No 
Requirements-Based Testing No 
Security Testing Yes 
Supports Parallel Execution Yes 
Test Script Reviews No 
Unicode Compliance No 

Cloud Workload Protection

Anomaly Detection Yes 
Asset Discovery Yes 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) Yes 
Data Security Yes 
Governance No 
Logging & Reporting Yes 
Machine Learning No 
Security Audit Yes 
Workload Diversity No 

Static Application Security Testing (SAST)

Application Security Yes 
Dashboard Yes 
Debugging Yes 
Deployment Management Yes 
IDE Yes 
Multi-Language Scanning No 
Real-Time Analytics Yes 
Source Code Scanning Yes 
Vulnerability Scanning Yes 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Alternatives

Alternatives

Resurface Reviews

Resurface

Resurface Labs