CodeSec by Contrast Security Launched at No Cost to Developers
June 02, 2022

Contrast Security announced the launch of CodeSec by Contrast Security (CodeSec), an easy to use, self-service, enterprise-tested application security solution available to all developers at no cost.

With seamless sign-up, the fastest and most accurate scanner in the market, and immediate, actionable results, developers can start scanning code and serverless environments with CodeSec to go from zero to secure in less than five minutes.

"IDC research shows that when organizations empower developers with the right DevSecOps tools, the results are more secure applications, faster remediation, and developers taking ownership of application security," said Jim Mercer, Research Director of DevOps and DevSecOps at IDC. "It is encouraging to see Contrast Security offering some of its enterprise security software capabilities as a free self-service to developers to help them painlessly identify insecure code earlier in the Software Development Life Cycle (SDLC)."

Thanks to Contrast's demand-driven analysis, CodeSec delivers 10x faster and more accurate scanning results for code and serverless applications right to the developer's laptop. CodeSec – Scan optimizes code security for Java, JavaScript and .NET with fast, industry-leading scans and actionable remediation guidance in a simple command-line interface. CodeSec – Serverless takes advantage of a new ground-breaking application security tool for serverless environments in AWS Lambda Functions (Java + Python) that detects serverless security vulnerabilities instantly while providing actionable remediation guidance in a simple command-line interface.

"For years, Contrast has been securing code for some of the world's largest organizations. To drive our mission of getting secure code moving — and we mean ALL code — we've decided to give every developer access to our cutting-edge technology for free," said Alan Naumann, Chairman of the Board, President and CEO at Contrast Security. "CodeSec delivers the fastest and most accurate results in the industry. In fact, we can deliver 95% more accuracy in Java applications than any other 'free' tool — all at speeds faster than anyone in the market."

Contrast's patented technology has been utilized to secure some of the world's leading software, healthcare and financial organizations for years. Now, developers will be able to harness the following benefits to drive innovation in their offerings with continuous security built into their deployment pipelines:

- Fastest and Most Accurate Scanner: Delivers up to 10x faster scan rates. Recognized as the fastest & most accurate Java scanner in the market.

- Immediate & Actionable Results: Scan code for traditional environments and serverless functions, find 70% more critical vulnerabilities and receive actionable results with 6x more true positives in seconds. Prioritizes vulnerabilities and provides actionable remediation guidance.

- From Start to Finish in Minutes: Frictionless and seamless signup process with GitHub or Google Account. Optionally, use a provided GitHub Action to automate the linkage to your GitHub pipeline – from zero to secure in less than five minutes. Enables developers to automate common workflows.

CodeSec is available to all developers today by authenticating with their existing GitHub or Google ID.

Share this

Industry News

August 16, 2022

Canonical welcomes the .NET development platform, one of Microsoft’s earliest contributions to open source projects, as a native experience on Ubuntu hosts and container images, starting in Ubuntu 22.04 LTS.

August 16, 2022

Veracode announced the launch of the Veracode Velocity Partner Program.

August 16, 2022

Render announced a new monorepository feature that enables its customers to keep all of their code in one super repository instead of managing multiple smaller repositories.

August 15, 2022

Gadget announced Connections, a major new feature that gives app developers access to building blocks that enable them to build and scale ecommerce apps in a fraction of the time, at a fraction of the cost.

August 15, 2022

Opsera is on the Salesforce AppExchange to help enterprise customers shorten software delivery cycles, improve pipeline quality and security, lower operations costs and better align software delivery to business outcomes.

August 15, 2022

Virtusa Corporation earned the DevOps with GitHub on Microsoft Azure advanced specialization, a validation of a services partner's deep knowledge, extensive experience and proven success in implementing secure software development practices applying DevOps principles and using Azure and GitHub solutions.

August 15, 2022

Companies looking to reduce their cloud costs with automated optimization can now easily procure CAST AI via Google Cloud Marketplace using their existing committed spend.

August 11, 2022

Granulate, an Intel Company, announced the upcoming launch of its latest free cost-reduction solution, gMaestro, a continuous workload and pod rightsizing tool for Kubernetes cost optimization.

August 11, 2022

Rezilion announced the availability of MI-X, a newly created open-source tool developed by Rezilion's vulnerability research team.

August 11, 2022

Contrast Security announced its enhanced application programming interface (API) security capabilities within the Contrast Secure Code Platform.

August 10, 2022

Mirantis made it even easier to integrate Mirantis Container Cloud into developer workflows and provide developers and operators with easy access and visibility into the Kubernetes clusters with the Mirantis Container Cloud Lens Extension announced today.

August 10, 2022

ArmorCode announced an integration with Traceable AI which will bring its data into the ArmorCode platform and improve Application Security Posture from code to cloud.

August 10, 2022

Quali unveiled enhanced features for its Torque platform to unify infrastructure orchestration and governance.

August 09, 2022

Veracode announced the enhancement of its Continuous Software Security Platform with substantial improvements to its integrated developer experience.

August 09, 2022

Normalyze announced General Availability for its Freemium offering, a self-serve, free platform that democratizes data discovery and classification in all three public clouds, Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).