No more typing reviews! Try our Samantha, our new voice AI agent.

Contrast Security Assess vs Seeker Interactive comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Contrast Security Assess
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
15
Ranking in other categories
Application Security Tools (23rd), Static Application Security Testing (SAST) (22nd)
Seeker Interactive
Average Rating
7.0
Reviews Sentiment
7.3
Number of Reviews
1
Ranking in other categories
Internet Security (16th), Mobile Threat Defense (14th), API Security (23rd)
 

Mindshare comparison

Contrast Security Assess and Seeker Interactive aren’t in the same category and serve different purposes. Contrast Security Assess is designed for Static Application Security Testing (SAST) and holds a mindshare of 1.5%, up 0.6% compared to last year.
Seeker Interactive, on the other hand, focuses on Internet Security, holds 0.9% mindshare, up 0.2% since last year.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Contrast Security Assess1.5%
SonarQube12.3%
Checkmarx One7.8%
Other78.4%
Static Application Security Testing (SAST)
Internet Security Mindshare Distribution
ProductMindshare (%)
Seeker Interactive0.9%
Zscaler Internet Access28.3%
Cisco Umbrella28.2%
Other42.6%
Internet Security
 

Featured Reviews

Ryan Flake - PeerSpot reviewer
Threat & Vulnerability Management Senior Analyst at a tech vendor with 10,001+ employees
Real-time assessments have improved remediation speed and reduced time spent on authentication issues
I do find that here and there with Contrast Security Assess there are user interface issues, particularly with how they work with libraries. The way that it works is people have access to library data for all applications, not just the applications that they should have access to. However, they are trying to fix that. The way the libraries are handled with Contrast Security Assess could use some work. I know that there is an additional service tier that allows for more in-depth library data. These are small things. Contrast support has been great in fixing any issues or getting back to us with questions. They seem to really be dedicated to the product.
San K - PeerSpot reviewer
Senior Group Leader at Infosys
More effective than dynamic scanners, but is missing useful learning capabilities
One area that Seeker can improve is to make it more customizable. All security scanning tools have a defined set of rules that are based on certain criteria which they will use to detect issues. However, the criteria that you set initially is not something that all applications are going to need. The purposes for which applications are designed may differ in practice in the industry, and because of this, there will always be tools that sometimes report false positives. Thus, there should be some means with which I can customize the way that Seeker learns about our applications, possibly by using some kind of AI / ML capability within the tool that will automatically reduce the number of false positives that we get as we use the tool over time. Obviously, when we first start using the scanning tool there will be false positives, but as it keeps going and as I keep using the tool, there should be a period of time where either the application can learn how to ignore false positives, or I can customize it do so. Adding this type of functionality would definitely prevent future issues when it comes to reporting false positives, and this is a key area that we have already asked the vendor to improve on, in general. On a different note, there is one feature that isn't completely available right now where you can integrate Seeker with an open-source vulnerability scanner or composition analysis tool such as Black Duck. I would very much like this capability to be available to us out-of-the-box, so that we can easily integrate with tools like Black Duck in such a way that any open source components that are used in the front-end are easily identified. I think this would be a huge plus for Seeker. Another feature within Seeker which could benefit from improvement is active verification, which lets you actively verify a vulnerability. This feature currently doesn't work in certain applications, particularly in scenarios where you have requested tokens. When we bought the tool, we didn't realize this and we were not told about it by the vendor, so initially it was a big challenge for us to overcome it and properly begin our deployment.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In our most critical applications, we have a deep dive in the code evaluation, which was something we usually did with periodic vulnerability assessments, code reviews, etc. Now, we have real time access to it. It's something that has greatly enhanced our code's quality. We have actually embedded a KPI in regards to the improvement of our code shell. For example, Contrast provides a baseline where libraries and the usability of the code are evaluated, and they produce a score. We always aim to improve that score. On a quarterly basis, we have added this to our KPIs."
"The solution is very accurate in identifying vulnerabilities. In cases where we are performing application assessment using Contrast Assess, and also using legacy application security testing tools, Contrast successfully identifies the same vulnerabilities that the other tools have identified but it also identifies significantly more. In addition, it has visibility into application components that other testing methodologies are unaware of."
"No other tool does the runtime scanning like Contrast does. Other static analysis tools do static scanning, but Contrast is runtime analysis, when the routes are exercised. That's when the scan happens. This is a tool that has a very unique capability compared to other tools. That's what I like most about Contrast, that it's runtime."
"The time it saves us is on the order of one US-based FTE, a security person at an average pay level, and at a bare minimum Contrast helps us like that resource; it's like having a CISSP guy, in the US, on our payroll."
"Assess has an excellent API interface to pull APIs."
"I am impressed with the product's identification of alerts and vulnerabilities."
"The accuracy of the solution in identifying vulnerabilities is better than any other product we've used, far and away."
"Contrast Security Assess has positively impacted my organization by providing a good way to find issues faster than regular static scanning, which after a while was unable to really find anything, giving us more visibility on the real code that is used in production along with the active DLLs that were loaded by our application in the backend, which helped us identify where the risk could be."
"A significant advantage of Seeker is that it is an interactive scanner, and we have found it to be much more effective in reducing the amount of false positives than dynamic scanners such as AppScan, Micro Focus Fortify, etc., and furthermore, with Seeker, we are finding more and more valid (i.e. "true") positives over time compared with the dynamic scanners."
 

Cons

"Regarding Contrast Security Assess's AI capabilities, I think they are missing a huge opportunity because they could lead the way in automatic testing and AI security testing, but currently, they do not offer this functionality, which is a shame."
"Contrast's ability to support upgrades on the actual agents that get deployed is limited. Our environment is pretty much entirely Java. There are no updates associated with that. You have to actually download a new version of the .jar file and push that out to your servers where your app is hosted. That can be quite cumbersome from a change-management perspective."
"The setup of the solution is different for each application. That's the one thing that has been a challenge for us. The deployment itself is simple, but it's tough to automate because each application is different, so each installation process for Contrast is different."
"The solution needs to improve flexibility...The scalability of the product is a problem in the solution, especially from a commercial perspective."
"My primary hurdle is that it doesn't support all of the technologies that we use."
"Contrast Security Assess covers a wide range of applications like .NET Framework, Java, PSP, Node.js, etc. But there are some like Ubuntu and the .NET Core which are not covered. They have it in their roadmap to have these agents. If they have that, we will have complete coverage."
"Personalization of the board and how to make it appealing to an organization is something that could be done on their end. The reports could be adaptable to the customer's preferences."
"The product's retesting part needs improvement. The tool also needs improvement in the suggestions provided for fixing vulnerabilities. It relies more on documentation rather than on quick fixes."
"All in all, the enterprise server installation is very easy and straightforward, but with the agent installation you might face problems up to 50% of the time for a variety of reasons, depending on what type of application is involved, the type of deployment used, and so on."
"One area that Seeker can improve is to make it more customizable. All security scanning tools have a defined set of rules that are based on certain criteria which they will use to detect issues. However, the criteria that you set initially is not something that all applications are going to need."
 

Pricing and Cost Advice

"I like the per-application licensing model... We just license the app and we look at different vulnerabilities on that app and we remediate within the app. It's simpler."
"For what it offers, it's a very reasonable cost. The way that it is priced is extremely straightforward. It works on the number of applications that you use, and you license a server. It is something that is extremely fair, because it doesn't take into consideration the number of requests, etc. It is only priced based on the number of onboarded applications. It suits our model as well, because we have huge traffic. Our number of applications is not that large, so the pricing works great for us."
"It's a tiered licensing model. The more you buy, as you cross certain quantity thresholds, the pricing changes. If you have a smaller environment, your licensing costs are going to be different than a larger environment... The licensing is primarily per application. An application can be as many agents as you need. If you've got 10 development servers and 20 production servers and 50 QA servers, all of those agents can be reporting as a single application that utilizes one license."
"The product's pricing is low. I would rate it a two out of ten."
"You only get one license for an application. Ours are very big, monolithic applications with millions of lines of code. We were able to apply one license to one monolithic application, which is great. We are happy with the licensing. Pricing-wise, they are industry-standard, which is fine."
"The solution is expensive."
"The good news is that the agent itself comes in two different forms: the unlicensed form and the licensed form. Unlicensed gives use of that software composition analysis for free. Thereafter, if you apply a license to that same agent, that's when the instrumentation takes hold. So one of my suggestions is to do what we're doing: Deploy the agent to as many applications as possible, with just the SCA feature turned on with no license applied, and then you can be more choosy and pick which teams will get the license applied."
"The licensing for Seeker is user-based and for 50 users I believe it costs about $70,000 per year."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
921,665 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
12%
Financial Services Firm
12%
Comms Service Provider
11%
Healthcare Company
7%
Financial Services Firm
19%
Government
13%
Comms Service Provider
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise3
Large Enterprise11
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Contrast Security Assess?
I was not involved in the negotiation of pricing for Contrast Security Assess, but I am somewhat familiar with setup cost and licensing. Licensing costs are fairly high compared to other DAST and S...
What needs improvement with Contrast Security Assess?
I don't use Contrast Security Assess anymore, so I cannot comment on how it can be improved; I stopped using it four years ago, but at the time, I think the UI could be improved to be more frie...
What advice do you have for others considering Contrast Security Assess?
I don't remember specific metrics regarding the outcomes we saw, but I can tell that the false positive rate was a third compared to a static analysis scanner; we used to have automation testin...
Ask a question
Earn 20 points
 

Also Known As

Contrast Assess
No data available
 

Overview

 

Sample Customers

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.
El Al Airlines and Société Française du Radiotelephone
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: October 2026.
921,665 professionals have used our research since 2012.