Application security startup Contrast Security Inc. today introduced Application Detection and Response, a new service that identifies and blocks attacks and zero-day or previously unknown vulnerabilities on applications in production.

Contrast Security ADR has been designed to help security teams identify vulnerabilities, detect threats and stop attacks that target custom applications and application programming interfaces. The company says the service is different from existing services by positioning defenses inside the actual application, enabling security from within.

The new solution seeks to address gaps in existing security defense that provide visibility into and control of the network, cloud, endpoints, data and identity but fail to provide visibility into the application, leaving a blindspot. Added to the mix is that security solutions such as web application firewalls provide limited visibility into the behavior of applications in production, making it difficult to identify, understand and stop emerging threats. Given these inherent flaws, threat actors are increasingly gaining access through applications.

Contrast Security ADR allows security teams to see attacks on applications and APIs with real-time alerts that include crucial context and fewer false positives. SecOps teams can use ADR’s real-time attack-blocking capabilities or perform incident response actions based on their standard security workflows.

Additionally, ADR improves detection and response with new security operation center integrations that allow security analysts to take faster action with better attack intelligence on application and API attacks. The functionality is achieved by leveraging the consoles of leading security information and event management, cloud-native application protection platforms and extended detection and response platforms.

Under the hood, ADR runs on the Contrast Runtime Security Platform, which detects code vulnerabilities and blocks attacks in production by embedding security directly into the application. The platform instruments the code at runtime, incorporating security checks to protect against misuse by developers and abuse by attackers, ensuring it is “secure from within.”

“Companies have invested in detection and response capabilities across the network, including EDR, network detection and response, cloud detection and response and identity detection and response and are gaining even greater security control using XDR and next-gen SIEM solutions,” said Chief Executive Rick Fitz. “But attackers continue to leverage gaps in applications and APIs. ADR closes that critical gap and blocks many zero-day attacks by removing these vulnerable blind spots.”

Contrast Security is a venture capital-backed company that has raised $269 million over six rounds, including a round of $150 million on a $1 billion-plus valuation in November 2021. Investors in the company include Liberty Strategic Capital LP, Warburg Pincus, Battery Ventures LP, General Catalyst Group Management, Microsoft’s M-12 Fund, AXA Venture Partners S.A.S. and Acero Capital Management.

Image: Contrast Security