Contrast Security Assess vs NowSecure comparison

Contrast Security and NowSecure are both solutions in the Static Application Security Testing (SAST) category. Contrast Security is ranked #26, while NowSecure is ranked #40. Contrast Security holds a 1.2% mindshare in SAST, compared to NowSecure’s 0.6% mindshare. Additionally, 100% of Contrast Security users are willing to recommend the solution, compared to 100% of NowSecure users who would recommend it.

Contrast Security Assess

Read 11 Contrast Security Assess reviews

3,117 Views
1,621 Comparison Views

100% willing to recommend

NowSecure

Read 1 NowSecure review

805 Views
749 Comparison Views

100% willing to recommend

Contrast Security Assess

NowSecure

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Contrast Security Assess and NowSecure based on real PeerSpot user reviews.

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST).

To learn more, read our detailed Static Application Security Testing (SAST) Report (Updated: April 2026).

Buyer's Guide

Static Application Security Testing (SAST)

April 2026

Download the complete report

Helped 893,164 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Contrast Security Assess

Ranking in Static Application Security Testing (SAST)

26th

Average Rating

8.8

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Application Security Tools (32nd)

NowSecure

Ranking in Static Application Security Testing (SAST)

40th

Average Rating

7.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Mobile App Testing Tools (20th)

Mindshare comparison

As of May 2026, in the Static Application Security Testing (SAST) category, the mindshare of Contrast Security Assess is 1.2%, up from 0.5% compared to the previous year. The mindshare of NowSecure is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Contrast Security Assess	1.2%
NowSecure	0.6%
Other	98.2%

Static Application Security Testing (SAST)

Featured Reviews

ToddMcAlister

Lead Application and Data Security Engineer at a insurance company with 5,001-10,000 employees

It has an excellent API interface to pull APIs.

Assess has brought our development time down because it helps create code the first time. Instead of going through the Jenkins process to build an application, they can see right off the bat that if there are errors in the code and fix them before it even goes to build.

Read full review

AnirudhNair

Quality Assurance and Analyst Intern at a university with 201-500 employees

Scalable and reliable, but dynamic analysis needs improvement

I would advise others when testing using NowSecure to do secondary tests with other tools. For example, set it up in the local environment and recheck what the results of the reports are. Since the dynamic results are less accurate, I would suggest using static analysis. I rate NowSecure a seven out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the key takeaways is that in order to have a secure application, you cannot rely on just the pentest, vulnerability assessments, and the periodicity of the reviews; you need the real-time feedback on that, and Contrast Assess offers that."

"Contrast was a very complete solution; it met all of our technical requirements and it was really the only IAST product that felt like a real product."

"The solution is very accurate in identifying vulnerabilities. In cases where we are performing application assessment using Contrast Assess, and also using legacy application security testing tools, Contrast successfully identifies the same vulnerabilities that the other tools have identified but it also identifies significantly more. In addition, it has visibility into application components that other testing methodologies are unaware of."

"When we access the application, it continuously monitors and detects vulnerabilities."

"I am impressed with the product's identification of alerts and vulnerabilities."

"No other tool does the runtime scanning like Contrast does. Other static analysis tools do static scanning, but Contrast is runtime analysis, when the routes are exercised. That's when the scan happens. This is a tool that has a very unique capability compared to other tools. That's what I like most about Contrast, that it's runtime."

"The time it saves us is on the order of one US-based FTE, a security person at an average pay level, and at a bare minimum Contrast helps us like that resource; it's like having a CISSP guy, in the US, on our payroll."

"We use the Contrast OSS feature that allows us to look at third-party, open-source software libraries, because it has a cool interface where you can look at all the different libraries. It has some really cool additional features where it gives us how many instances in which something has been used... It tells us it has been used 10 times out of 20 workloads, for example. Then we know for sure that OSS is being used."

More Contrast Security Assess pros

"The most valuable feature is the ability to download an application without actually putting in the APK, as it gives us an option to put the APK in if we want to, but we can also download it from the App Store and Play Store."

"The most valuable feature is the ability to download an application without actually putting in the APK. It gives us an option to put the APK in if we want to but we can download it from the App Store and Play Store."

Cons

"Regarding the solution's OSS feature, the one drawback that we do have is that it does not have client-side support."

"To instrument an agent, it has to be running on a type of application technology that the agent recognizes and understands. It's excellent when it works. If we're using an application that is using an unsupported technology, then we can't instrument it at all. We do use PHP and Contrast presently doesn't support that, although it's on their roadmap. My primary hurdle is that it doesn't support all of the technologies that we use."

"The solution should provide more details in the section where it shows that third-party libraries have CVEs or some vulnerabilities."

"Personalization of the board and how to make it appealing to an organization is something that could be done on their end. The reports could be adaptable to the customer's preferences."

"I would like to see them come up with more scanning rules."

"Regarding the solution's OSS feature, the one drawback that we do have is that it does not have client-side support. We'll be missing identification of libraries like jQuery or JavaScript, and such, that are client-side."

"I think there was activity underway to support the centralized configuration control. There are ways to do it, but I think they were productizing more of that."

More Contrast Security Assess cons

"In this solution, there are two kinds of testing, static analysis, and dynamic analysis. There needs some improvement in testing with dynamic analysis because I have found it is not accurate"

"There needs some improvement in testing with dynamic analysis because I have found it is not accurate."

Pricing and Cost Advice

"The solution is expensive."

"For what it offers, it's a very reasonable cost. The way that it is priced is extremely straightforward. It works on the number of applications that you use, and you license a server. It is something that is extremely fair, because it doesn't take into consideration the number of requests, etc. It is only priced based on the number of onboarded applications. It suits our model as well, because we have huge traffic. Our number of applications is not that large, so the pricing works great for us."

"The product's pricing is low. I would rate it a two out of ten."

"You only get one license for an application. Ours are very big, monolithic applications with millions of lines of code. We were able to apply one license to one monolithic application, which is great. We are happy with the licensing. Pricing-wise, they are industry-standard, which is fine."

"I like the per-application licensing model... We just license the app and we look at different vulnerabilities on that app and we remediate within the app. It's simpler."

"It's a tiered licensing model. The more you buy, as you cross certain quantity thresholds, the pricing changes. If you have a smaller environment, your licensing costs are going to be different than a larger environment... The licensing is primarily per application. An application can be as many agents as you need. If you've got 10 development servers and 20 production servers and 50 QA servers, all of those agents can be reporting as a single application that utilizes one license."

"The good news is that the agent itself comes in two different forms: the unlicensed form and the licensed form. Unlicensed gives use of that software composition analysis for free. Thereafter, if you apply a license to that same agent, that's when the instrumentation takes hold. So one of my suggestions is to do what we're doing: Deploy the agent to as many applications as possible, with just the SCA feature turned on with no license applied, and then you can be more choosy and pick which teams will get the license applied."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

893,164 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Manufacturing Company

11%

Comms Service Provider

Computer Software Company

Construction Company

14%

Retailer

11%

Financial Services Firm

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	3
Large Enterprise	6

No data available

Comparisons

SonarQube vs Contrast Security Assess

Compared 6% of the time

Veracode vs Contrast Security Assess

Compared 5% of the time

Digital.ai Application Security vs Contrast Security Assess

Compared 4% of the time

FortiDevSec vs Contrast Security Assess

Compared 4% of the time

GitHub vs Contrast Security Assess

Compared 4% of the time

More Contrast Security Assess Competitors

Data Theorem API Secure vs NowSecure

Compared 20% of the time

CodeScan Static Code Analysis vs NowSecure

Compared 16% of the time

Veracode vs NowSecure

Compared 15% of the time

ImmuniWeb vs NowSecure

Compared 12% of the time

OpenText Core Application Security vs NowSecure

Compared 9% of the time

More NowSecure Competitors

Product Reports

Buyer's Guide

Contrast Security Assess

May 2026

Download Contrast Security Assess product report

Buyer's Guide

Mobile App Testing Tools

April 2026

Download NowSecure product report

Also Known As

Contrast Assess

No data available

Overview

Contrast Security Assess is an IAST platform known for accurate vulnerability detection. It integrates into development workflows, offering real-time insights into security issues with minimal false positives, supporting legacy applications and enhancing code security visibility.

Designed to integrate seamlessly into DevOps workflows, Contrast Security Assess automates real-time vulnerability detection and reduces false positives through its powerful IAST features. By continuously monitoring vulnerabilities, it provides a robust option for securing legacy applications and identifying vulnerabilities without lengthy scans. This cloud-hosted platform supports numerous programming languages, making it versatile for security testing across enterprise environments. Users benefit from detailed reports that pinpoint exact code locations requiring remediation, enhancing speed and efficiency in addressing security concerns.

What are the key features of Contrast Security Assess?

IAST Technology: Delivers accurate vulnerability detection with reduced false positives.
Seamless Integration: Integrates into development processes, supporting real-time vulnerability detection.
Open Source Security: Analyzes third-party libraries for vulnerabilities.
Continuous Monitoring: Provides valuable insights with real-time security feedback for developers.
API Interface: Enhances operational efficiency and streamlining with minimal false positives.

What benefits should users look for in reviews?

Enhanced Security Visibility: Offers comprehensive insights across application environments.
Speed and Efficiency: Quick identification and remediation of vulnerabilities accelerate development.
Operational Streamlining: Seamless integration into DevOps workflows improves productivity.
Legacy Application Support: Effective for securing existing applications with ongoing monitoring.

Companies in industries requiring high levels of application security, such as finance and healthcare, implement Contrast Security Assess for its ability to enhance visibility and detect vulnerabilities early in the development lifecycle. Its seamless integration with DevOps processes makes it ideal for environments that prioritize agility while maintaining stringent security standards.

Contrast Security

NowSecure provides a comprehensive suite of mobile app security solutions that cater to businesses aiming to protect their applications from vulnerabilities, ensuring robust security and compliance.

NowSecure offers dynamic solutions designed to meet the needs of businesses prioritizing mobile app security. Its platform delivers automated mobile app security testing that focuses on speed and accuracy to identify vulnerabilities and secure mobile applications. Businesses trust NowSecure to ensure compliance with security standards and safeguard sensitive data across mobile applications.

What are the key features of NowSecure?

Automated Testing: Enhances security with automated analysis, reducing manual effort.
Speed and Efficiency: Provides rapid results to quickly identify and fix vulnerabilities.
Comprehensive Reporting: Offers detailed reports for compliance and security analysis.
Compliance Assurance: Ensures adherence to leading compliance standards.

What benefits and ROI can users expect?

Improved Security Posture: Strengthens app defenses by detecting and addressing security gaps.
Time and Cost Savings: Automates processes that reduce time spent on manual security assessments.
Enhanced Compliance: Supports adherence to industry regulations and standards.
Data Protection: Safeguards sensitive information, minimizing potential breaches.

NowSecure is widely implemented across industries such as finance, healthcare, and retail. It provides these sectors with essential security assurances, offering tailored insights and reporting to meet regulatory and security requirements. Businesses benefit from its specialized focus on mobile app security, integrating seamlessly into existing workflows.

NowSecure

Sample Customers

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.

Vaporstream, FIS, MEA Financial, Silent Circle, Capital One, Citi, EY, EMC, Emerson, Kaiser Permanente, The Home Depot, Humana, Shell, Kellogg's, TD Bank, VMware

Buyer's Guide

Static Application Security Testing (SAST)

April 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: April 2026.

DOWNLOAD NOW

893,164 professionals have used our research since 2012.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.