OSS

• Spring-web Java Deserialization: CVE-2016-1000027

Support Bulletins

• Support Bulletin: End of life announcement - Proxy agent
• Support bulletin: .NET/.NET Core Applications may see a change in their library score due to recent OSS improvements.
• Support Bulletin: Deprecation of TLS 1.0 & 1.1
• Support Bulletin: SaaS to leverage AWS CloudFront CDN
• Support Bulletin: End of TeamServer support for Tomcat 7
• Support Bulletin: Ghostcat CVE-2020-1938

Protect

• How the Contrast agents handle XXS attacks in Protect

Administration

• Does Contrast Security have a Bug Bounty program?
• Can I have a free trial or demo of Contrast?
• How often is maintenance conducted on Contrast's SaaS systems?
• How do the Contrast agents behave if the Contrast server is unavailable?
• Can I bypass email activation when creating new users?
• How can I tell the version of the Contrast server in use?

See all 9 articles

Contrast UI

• Which URL in the Contrast UI should be used by a load balancer health check?
• Why does Contrast report an increasing number of URLs in an application?
• Why is the On-Premise keystore password stored in plain text?

Integrations and Plugins

• How do I get a .pem file for ADFS SSO integration?

Java Agent

• Are old libraries automatically removed from Contrast?
• How do I tell if my application is still using the deprecated Java launcher jar? 
• How does the Java agent handle application naming
• Is the contrast.jar signed?
• Java Agent Effects on Application Performance (Assess)
• Legacy Java Configuration Properties

See all 7 articles

.NET Agent

• Deprecated .NET Framework Agent configuration options
• How does the .NET Framework agent handle application naming?
• How Does the Contrast .NET Agent Work?
• Is it possible to prevent an IIS restart following installation of the .NET agent?
• Why did my PowerShell uninstall of the .NET Framework agent not succeed?
• Why do my .NET servers and applications sometimes show offline in the Contrast UI?

See all 7 articles

Node.js Agent

• Command line arguments for the Node.js Agent
• Does the Node.js agent affect my application's performance?
• How is the application URL set by the Node Agent?
• What is dependency confusion?

Policy Management

• How do I check the library scores for an application?
• Understanding Contrast Log Enhancers
• Contrast Security CWE Protect Rule Mappings
• Why doesn't the sanitizer or security control I am using show up in the Contrast data flow?
• What information does Contrast capture?
• Why are some Assess rules disabled by default?

See all 8 articles

Ruby Agent

• Running Contrast Ruby agent in testing suites

Vulnerability Lifecycle

• What is the data retention policy for Contrast findings?
• How do I manage vulnerabilities across build versions?
• Will vulnerabilities be automatically closed after code changes?
• How do I handle findings in out-of-reach code?
• Can I import a vulnerability into the Contrast UI?