All Research Sponsored By:Contrast Security

Modern Bank Heists Report 2024
RESEARCH CONTENT: With cyberattacks increasingly targeting financial institutions, modern bank heists can occur without a hint of noise. This annual report aims to shed light on the cybersecurity threats facing the financial sector, focusing on the changing behavior of cybercriminal cartels and the defensive shift of the financial sector. Read on to learn more.
Posted: 30 Jan 2024 | Published: 30 Jan 2024

TOPICS:  .NET

Contrast Security and The Digital Operational Resilience Act (DORA)
WHITE PAPER: The Digital Operational Resilience Act (DORA) went into effect in 2023, but do you know what is required from you to stay compliant? Explore this white paper to find out and learn how Contrast Security helps support DORA regulation.
Posted: 04 Nov 2023 | Published: 04 Nov 2023

TOPICS:  .NET

Revolutionizing DAST with IAST: A New Era in Application Security
WHITE PAPER: While dynamic application security testing (DAST) has been a go-to AppSec testing technique for decades, it is not without its drawbacks. This is where interactive application security testing (IAST) comes into play, building off of DAST, but analyzing apps from the inside out, rather than from the outside in. Read this white paper to learn more.
Posted: 14 Jul 2023 | Published: 15 Jul 2023

TOPICS:  .NET

Floor & Decor Ensures Comprehensive and Efficient Security with Contrast Security
CASE STUDY: By using Contrast Security solutions, Floor & Décor has been able to better identify, remediate, and avoid potentially impactful security events such as the Log4j/Log4Shell incident. In fact, the company’s applications were protected from the vulnerability even before it was publicly known. Access the case study to learn more.
Posted: 30 Jun 2023 | Published: 30 Jun 2023

TOPICS:  .NET

Navigating turbulent times: How businesses will need to overcome adversity in 2023
WHITE PAPER: In the past few years, there have been several significant disruptions to global markets. With events creating uncertainty and fear, and with new technology emerging at a rapid pace, businesses must adapt, grow, and be more resilient than ever before. Read on to learn how to overcome these challenges with an enhanced security posture.
Posted: 01 Jun 2023 | Published: 01 Jun 2023

TOPICS:  .NET

3 ways to recessionproof your application security program in 2023 with Contrast Assess
WHITE PAPER: When markets become unstable, businesses face uncertainties. This usually means that budgets are tighter, and some business processes may be disrupted. To compound the issue, even if an economic slowdown affects your business, it won’t affect cyber criminals. Read more to learn how to recession-proof your business in uncertain times.
Posted: 25 May 2023 | Published: 25 May 2023

TOPICS:  .NET

Debunking the myths around RASP
BLOG: Can you separate RASP fact from fiction? This handy guide debunks the top 5 commonly-believed RASP myths. Put your AppSec knowledge to the test by reading on now.
Posted: 21 Apr 2023 | Published: 21 Apr 2023

TOPICS:  .NET

How IAST helps observability of multiplying, complex apps
BLOG: In the age of observability, Interactive Application Security Testing (IAST) has emerged as an essential security testing strategy. This resource examines how IAST helps observability of multiplying, complex apps, as well as the crucial role it plays in an effective security strategy.
Posted: 20 Apr 2023 | Published: 21 Apr 2023

TOPICS:  .NET

Debunking IAST myths
BLOG: While Interactive Application Security Testing (IAST) can help accelerate DevSecOps, some common misconceptions persist that can stymie even the most valiant of security testing efforts. This essential resource debunks 5 commonly-believed IAST myths.
Posted: 20 Apr 2023 | Published: 21 Apr 2023

TOPICS:  .NET

AWS Differences between Active and Passive IAST and how to get the best of both worlds
WHITE PAPER: Interactive Application Security Testing (IAST) is a relatively new technology that has caused a lot of confusion for not being clearly explained. This article sets out to clear the air. It will explain:What is IAST?What’s the difference between Active IAST & Passive IAST? Which approach is better for you?Access the paper here.
Posted: 16 Feb 2023 | Published: 16 Feb 2023

TOPICS:  .NET

Securing AWS Lambda function URLs
WHITE PAPER: This white paper covers the risks associated with using function URLs and how your organization should address them. Access it here.
Posted: 08 Nov 2022 | Published: 08 Nov 2022

TOPICS:  .NET

Avoid The Security Inconsistency Pitfalls Transitioning To Serverless
ANALYST REPORT: Serverless environments and applications are far from perfect. This Forrester report details the common issues with serverless architecture, where your organization is accountable, and what you can do to bolster security in your serverless environments. Read it here.
Posted: 02 Nov 2022 | Published: 02 Nov 2022

TOPICS:  .NET

CM.com Improves Security and Efficiency while Reducing Risk
CASE STUDY: CM.com has become a global leader in cloud software for conversational commerce that enables businesses to deliver a customized customer experience. By partnering with Contrast Security, CM.com were able to overhaul their application security. Read on to learn more.
Posted: 30 Sep 2022 | Published: 30 Sep 2022

TOPICS:  .NET

SAST vs. IAST: Picking the Right Tool for the Job
WEBCAST: Watch this webinar for a demo of static application security testing (SAST) and interactive application security testing (IAST) solutions and determine which is the right tool for your needs.
Posted: 28 Sep 2022 | Premiered: Sep 28, 2022

TOPICS:  .NET

IDC TechBrief: Interactive Application Security Testing
WHITE PAPER: With modern application development operating at break-neck speeds, DevOps teams pressured by deadlines are often forced to compromise security for efficiency’s sake. This white paper examines the benefits of using interactive application security testing to mitigate the security risk and complexities of using DevSecOps. Read on to learn more.
Posted: 10 Sep 2022 | Published: 10 Sep 2022

TOPICS:  .NET

DEVSECOPS BUYER’S GUIDE: APPLICATION SECURITY
EGUIDE: Read this DevSecOps Buyer’s Guide and get the comprehensive checklist you need to assess, vet, and purchase a DevSecOps platform that delivers accurate, continuous, and integrated security monitoring and remediation.
Posted: 15 Feb 2022 | Published: 16 Feb 2022

TOPICS:  .NET

State of Serverless Application Security Report
RESOURCE: Companies with the agility to evolve with current trends and quickly tap new revenue opportunities are best positioned to survive and thrive in the post-pandemic economy – especially when it comes to protecting critical applications. Read this report for a closer look at application and API security trends and remediation strategies.
Posted: 15 Feb 2022 | Published: 16 Feb 2022

TOPICS:  .NET

HOW TO KEEP UP WITH THE RAPIDLY EXPANDING SCOPE OF THE OWASP TOP TEN
EBOOK: The newest addition to the OWASP Top Ten was recently published to help organizations assess their application security efforts – but false positives could lead to unnecessary stress. Download now to learn how Contrast’s observability platforms is designed to keep up with the rapidly expanding scope of the OWASP Top Ten.
Posted: 01 Feb 2022 | Published: 01 Feb 2022

TOPICS:  .NET

3 WAYS CONTRAST HELPS SAFEGUARD THE SOFTWARE SUPPLY CHAIN
EBOOK: The massive cyberattack on SolarWinds in 2020 was a wake-up call for organizations years to come to prioritize application security for all parts of their software supply chain. Download this e-book to learn how Contrast aims to help you safeguard your software supply chain from potential cyberattacks in 3 ways.
Posted: 01 Feb 2022 | Published: 01 Feb 2022

TOPICS:  .NET

Developers: Own Your Security Destiny
ESG SHOWCASE: This report from primary research and analyst firm Enterprise Strategy Group (ESG) outlines the significant consequences of failing to modernize your application security strategy and provides an actionable roadmap that developers can follow to secure their development practices from the outset.
Posted: 27 Jan 2022 | Published: 27 Jan 2022

TOPICS:  .NET

Transforming the Role of Security Analyst From Gatekeeper to Developer Enabler
ESG SHOWCASE: Access this report from Enterprise Strategy Group (ESG) to discover how the role of security analyst is evolving to work with (instead of against) development, and learn what actions you can take now to set your organization up for success.
Posted: 26 Jan 2022 | Published: 26 Jan 2022

TOPICS:  .NET

AWS Quickly and Easily Scale and Secure Your Serverless Applications
WHITE PAPER: According to Forrester, 25% of developers will be using serverless technologies by next year. However, many organizations have concerns about how legacy application security approaches can support serverless applications. Discover the new serverless security trends that have been cropping up in response to these concerns in this report.
Posted: 21 Oct 2021 | Published: 21 Oct 2021

TOPICS:  .NET

Pipeline-Native Scanning for Modern Application Development
WHITE PAPER: Tap into this white paper to learn about an approach to application security that uses demand-driven static analysis to automatically triage vulnerabilities according to next-step actions within a modern development environment.
Posted: 07 Oct 2021 | Published: 07 Oct 2021

TOPICS:  .NET

PERIMETER SECURITY NOISE LEAVES APPLICATIONS VULNERABLE TO ATTACKS
WHITE PAPER: Learn how you can get AppSec protection that can compensate with the necessary visibility, accuracy, scalability, and ease of deployment to keep pace with modern application vulnerabilities without generating false positives and false negatives.
Posted: 08 Feb 2021 | Published: 08 Apr 2020