Contrast Security

Contrast Security was founded by Jeff Williams and Arshan Dabirsiaghi after an extensive research and development effort begun in 2009. Jeff and Arshan are experienced application security veterans. Previously, Jeff founded Aspect Security and was a key part of creating the Open Web Application Security Project (OWASP) where he served as Global Chair for eight years. Arshan was the director of research at Aspect and led many successful open-source application security projects.

Jeff and Arshan tried every application security product on the market to find a fast and accurate tool that could make their consultants and customers more efficient and effective. But none of the static analysis or dynamic scanning products on the market had enough context to accurately identify vulnerabilities. All were too slow, too noisy, or required experts to run them.

Arshan-DabirsiaghiAspect built a highly successful consulting business performing security analysis and testing of over 50 million lines of critical code each year for numerous financial, retail and government organizations. Despite the necessity of this manual process, it simply couldn’t scale to cover the entire application portfolio at most companies. Business requirements for both speed and scale drove the need to build alternative approaches that automated application security work.

As a result, Jeff and Arshan created Contrast Security, the world’s fastest application security software. Building on decades of experience and research securing real applications, Contrast uses instrumentation to enable applications to instantly and automatically test themselves for application security issues. The resulting context allows vulnerabilities to be discovered quickly and accurately without requiring security expertise.

The Contrast Security mission is to empower any organization to secure all applications via a fast, fully automated, accurate, and affordable application security technology that development, test, and operations can use without disrupting current processes. Contrast is taking the industry beyond compliance to make the Web safer for all. Put simply, Contrast adds security to all the parts of existing software development, integration, test, and operational environments – no experts required.