The latest trends and tips in DevSecOps through instrumentation and Security Observability.

Subscribe To Blog


The SolarWinds attack has been extensively covered over the past two months—and rightly so. It has been characterized as among the worst hacks of the past 10 years, targeting SolarWinds’ software factory and compromising the code in software..

Continue Reading >>

How Contrast Simplified and Streamlined Its New Hire Onboarding Process

A hiring team spends a great deal of time identifying and interviewing candidates before making an offer. On average, it takes 58 days between posting a software engineering opening and making an offer of acceptance. Within that window of making..

Continue Reading >>

Contrast Application Security Platform Accepted Into Department of Defense Platform One

The U.S. Department of Defense (DoD) takes cybersecurity to new levels. Platform One, a program based out of the U.S. Air Force Office of the Chief Software Officer, builds and secures technology tools across the military that are used to “guide,..

Continue Reading >>

When Legacy Application Security Becomes Your “Mr. Hyde”

Agile and DevOps are critical linchpins in digital transformation. Agile focuses on the development life cycle of modern software development life cycle (SDLC), whereas DevOps spans across development, testing, and operations life cycles...

Continue Reading >>

AppSec Becomes A Priority For New CISOs/CSOs: Recommendations For The First 100 Days

With digital transformation as a top concern for many organizations today, application security (AppSec) is more important than ever for CISOs/CSOs. Newly hired leaders must account for AppSec from the very start, and should assemble a..

Continue Reading >>

Priorities in Agile Lead to Software Observability in Annual Agile Report

It has been nearly 20 years since a group of 17 software developers conceived the “Manifesto for Agile Software Development.” Frustrated by a development methodology that followed a set path—with long development cycles before a final product was..

Continue Reading >>

Application Security Testing (AST) Tools After Hours

Do you ever wonder how effective application security (AppSec) testing really is? Or which approach is best? Understanding the differences between static, dynamic, and interactive testing can be challenging. A simple way to explain the..

Continue Reading >>

Digital Transformation Moves Application Security to the Top CISO/CSO Priority

Application security plays a critical role in enabling digital transformation. COVID-19 compressed initiatives that would have played out over the past several years into the time frame of a couple months, and digital initiatives are now a top..

Continue Reading >>

Accuracy in AppSec Is Critical to Reducing False Positives

According to a new report from the Neustar International Security Council (NISC), over one-quarter of security alerts fielded within organizations are false positives. Surveying senior security professionals across five European countries and the..

Continue Reading >>

What It Takes to Be Named One of Inc. Magazine’s Best Workplaces in 2020

Inc. magazine has recognized Best Workplaces annually for nearly four decades. Contrast Security was selected one of the 2020 Best Workplaces winners. The recognition is especially meaningful since winners are evaluated based on the survey..

Continue Reading >>