No more typing reviews! Try our Samantha, our new voice AI agent.

Contrast Security Assess vs DoveRunner Mobile Application Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 18, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Contrast Security Assess
Ranking in Application Security Tools
17th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
15
Ranking in other categories
Static Application Security Testing (SAST) (12th)
DoveRunner Mobile Applicati...
Ranking in Application Security Tools
32nd
Average Rating
7.6
Reviews Sentiment
2.9
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Application Security Tools category, the mindshare of Contrast Security Assess is 1.7%, up from 0.8% compared to the previous year. The mindshare of DoveRunner Mobile Application Security is 0.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Contrast Security Assess1.7%
DoveRunner Mobile Application Security0.4%
Other97.9%
Application Security Tools
 

Featured Reviews

Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Real-time assessments have improved remediation speed and reduced time spent on authentication issues
I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries. The way that it works is people have access to library data for all applications, not just the applications that they should have access to. However, they are trying to fix that. The way the libraries are handled with Contrast Security Assess could use some work. I know that there is an additional service tier that allows for more in-depth library data. These are small things. Contrast support has been great in fixing any issues or getting back to us with questions. They seem to really be dedicated to the product.
Vikas Kejriwal - PeerSpot reviewer
Engineering Manager at a comms service provider with 11-50 employees
Protection has secured our mobile algorithms and now testing guidelines need improvement
The best features DoveRunner Mobile Application Security offers include its simple integration, which is basically a pipeline, making it a plug-and-play type of approach that automatically takes care of all the heavy work. Regarding how the automatic protection works, I appreciate the simplicity of this particular SDK, as I just need to integrate it using Xcode directly and use CocoaPods to install it in applications, which simplifies the security layers along with all the signing and submission of the application to the App Store. DoveRunner Mobile Application Security has positively impacted my organization so far by alleviating a constant fear that our proprietary algorithms or shaders might be leaked, which could affect our application's revenue, and we are optimistic about achieving secure integration after launching in production.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"From a percentage perspective, somewhere around 90 percent of the time we used to spend has been given back to our team, because the false positive rate with Contrast is less than 5 percent."
"The time it saves us is on the order of one US-based FTE, a security person at an average pay level, and at a bare minimum Contrast helps us like that resource; it's like having a CISSP guy, in the US, on our payroll."
"It has helped us to improve the overall security posture of the company, we are able to address the findings before they have been reported by a third-party, and it has also helped us to gain our customers' trust."
"Contrast was a very complete solution; it met all of our technical requirements and it was really the only IAST product that felt like a real product."
"This has changed the way that developers are looking at usage of third-party libraries, upfront. It's changing our model of development and our culture of development to ensure that there is more thought being put into the usage of third-party libraries."
"I am impressed with the product's identification of alerts and vulnerabilities."
"It is a stable solution...Contrast Security Assess is one of the first players in this market, so they have experience and customers, especially abroad. Overall, it's a good product."
"No other tool does the runtime scanning like Contrast does. Other static analysis tools do static scanning, but Contrast is runtime analysis, when the routes are exercised. That's when the scan happens. This is a tool that has a very unique capability compared to other tools. That's what I like most about Contrast, that it's runtime."
"After exploring DoveRunner Mobile Application Security, I can say that you are getting everything on a single platform."
"DoveRunner Mobile Application Security has positively impacted my organization so far by alleviating a constant fear that our proprietary algorithms or shaders might be leaked, which could affect our application's revenue, and we are optimistic about achieving secure integration after launching in production."
 

Cons

"I would rate Contrast Security Assess a seven out of ten because I think it's a good product, better than average, but I'm sure it has a lot of room for growth."
"Regarding the solution's OSS feature, the one drawback that we do have is that it does not have client-side support. We'll be missing identification of libraries like jQuery or JavaScript, and such, that are client-side."
"Contrast's ability to support upgrades on the actual agents that get deployed is limited. Our environment is pretty much entirely Java. There are no updates associated with that. You have to actually download a new version of the .jar file and push that out to your servers where your app is hosted. That can be quite cumbersome from a change-management perspective."
"The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes."
"Contrast Security Assess covers a wide range of applications like .NET Framework, Java, PSP, Node.js, etc. But there are some like Ubuntu and the .NET Core which are not covered. They have it in their roadmap to have these agents. If they have that, we will have complete coverage."
"I think Contrast can also integrate with some AI tools and provide chat features if possible, so in case we have any more questions, we can chat with that chatbot and get remediations, which I believe would be a better enhancement to Contrast."
"Regarding Contrast Security Assess's AI capabilities, I think they are missing a huge opportunity because they could lead the way in automatic testing and AI security testing, but currently, they do not offer this functionality, which is a shame."
"The solution needs to improve flexibility...The scalability of the product is a problem in the solution, especially from a commercial perspective."
"I think improved guidelines could be added regarding testing on the security aspect."
"As I am in the exploration phase of DoveRunner Mobile Application Security, I chose a rating of eight."
 

Pricing and Cost Advice

"It's a tiered licensing model. The more you buy, as you cross certain quantity thresholds, the pricing changes. If you have a smaller environment, your licensing costs are going to be different than a larger environment... The licensing is primarily per application. An application can be as many agents as you need. If you've got 10 development servers and 20 production servers and 50 QA servers, all of those agents can be reporting as a single application that utilizes one license."
"The solution is expensive."
"For what it offers, it's a very reasonable cost. The way that it is priced is extremely straightforward. It works on the number of applications that you use, and you license a server. It is something that is extremely fair, because it doesn't take into consideration the number of requests, etc. It is only priced based on the number of onboarded applications. It suits our model as well, because we have huge traffic. Our number of applications is not that large, so the pricing works great for us."
"You only get one license for an application. Ours are very big, monolithic applications with millions of lines of code. We were able to apply one license to one monolithic application, which is great. We are happy with the licensing. Pricing-wise, they are industry-standard, which is fine."
"I like the per-application licensing model... We just license the app and we look at different vulnerabilities on that app and we remediate within the app. It's simpler."
"The product's pricing is low. I would rate it a two out of ten."
"The good news is that the agent itself comes in two different forms: the unlicensed form and the licensed form. Unlicensed gives use of that software composition analysis for free. Thereafter, if you apply a license to that same agent, that's when the instrumentation takes hold. So one of my suggestions is to do what we're doing: Deploy the agent to as many applications as possible, with just the SCA feature turned on with no license applied, and then you can be more choosy and pick which teams will get the license applied."
Information not available
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Financial Services Firm
13%
Comms Service Provider
10%
Construction Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise3
Large Enterprise11
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Contrast Security Assess?
I was not involved in the negotiation of pricing for Contrast Security Assess, but I am somewhat familiar with setup cost and licensing. Licensing costs are fairly high compared to other DAST and S...
What needs improvement with Contrast Security Assess?
I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries. The way that it works is people have access to library d...
What advice do you have for others considering Contrast Security Assess?
I would give Contrast Security Assess a score of 8 out of 10. That is a small little issue, but it is a great product and I would recommend it to others. There are a couple things that could be imp...
What needs improvement with DoveRunner Mobile Application Security?
I think improved guidelines could be added regarding testing on the security aspect.
What is your primary use case for DoveRunner Mobile Application Security?
My main use case for DoveRunner Mobile Application Security is to protect our own developed shaders APIs and certain algorithms we have worked on, as we do not want them to be reverse-engineered or...
What advice do you have for others considering DoveRunner Mobile Application Security?
The specific outcomes I hope to see include a decrease in piracy incidents and hopefully a secured hit on the revenue we receive from jailbroken devices or any reverse engineering after integrating...
 

Also Known As

Contrast Assess
No data available
 

Overview

 

Sample Customers

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.
Information Not Available
Find out what your peers are saying about Contrast Security Assess vs. DoveRunner Mobile Application Security and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.