| Attribute |  VeracodeOther license |  Contrast SecurityOther license |  DetectifyOther license |
|---|---|---|---|
| Overview | |||
| Primary focus | Application testing across code and dependencies | In-app security sensors for IAST, SAST, SCA, and runtime attack detection (ADR). | External attack surface management and web app vulnerability scanning |
| Deployment | Not specified | Self-hosted | Not specified |
| Source model | Other license | Other license | Other license |
| Pricing model | contact sales | freemium | freemium |
| API available | Yes | Yes | Not specified |
| Windows desktop | Not specified | Not specified | Not specified |
| Mobile app | Not specified | Not specified | Not specified |
| Overview | Veracode supplies application security testing for proprietary code and open-source components. | Contrast Security, founded by OWASP co-creator Jeff Williams, instruments applications with in-app sensors: Contrast Assess (IAST) and Scan (SAST) find vulnerabilities, Contrast SCA flags risky dependencies, and its ADR/RASP layer detects and blocks attacks in production. | Detectify combines automated DAST scanning with crowdsourced vulnerability research to monitor internet-facing assets and web apps for exploitable issues. |
| Explore further | |||
| Vendor website | Visit vendor ↗ | Visit vendor ↗ | Visit vendor ↗ |
| ITHub profile | View full profile → | View full profile → | View full profile → |
VeracodeOther licenseContrast SecurityOther licenseDetectifyOther licenseⓘ Confirm technical details and prices with each vendor before making a decision.