Integrations

Documentation is provided for supported integrations that are part of the core, recommended way that Contrast works. Contrast may be compatible with other tools or scenarios developed by the community that are not supported. For specific information on third-party tools and technologies, consult the documentation for that product. The Contrast Support Portal also includes additional articles on specific use cases or workarounds.

Contrast and Northstar are separate platforms with their own integration sets. Some integrations are available on both; some are available on only one.

Note

Note that supported integrations are further documented in the left-hand navigation menu. Community integrations are linked to external documentation. The icon indicates links to documentation in the Contrast Support Portal or third-party sites.

You must have the organization administrator role in Contrast to view the integrations available to your organization.

Contrast

	Agile Central Integration	Agile Central (Rally - formerly CA Agile Central) Work tracking platform Automatically tracks vulnerabilities in your applications
	AWS Security Hub with Contrast Assess	AWS Security Hub Integrate Contrast with your platform tools Ensures transfer of security insights and findings directly to AWS
	Amazon Security Lake with Contrast Assess	Amazon Security Lake Integrate Contrast with your platform tools Automatically push findings and other relevant security data
	Azure Boards Integrations	Azure Boards Integrate Contrast with your existing tools to streamline your workflows Automatically generate tickets for bugtracking, synchronize comments, and push notifications for your applications
	Azure DevOps Pipeline for Contrast Scan	Azure DevOps Pipeline for Contrast Scan Integrate Contrast with your existing tools to streamline your workflows Enable secure, offline static application security testing (SAST) directly within Azure DevOps pipelines
	Azure DevOps Azure Pipelines Marketplace	Azure Pipelines Integrate Contrast with your deployment workflow
	Bamboo Plugin Contrast Security for Bamboo Marketplace Contrast Bamboo Plugin Source Code	Bamboo Continuous integration and build tools Connect Bamboo to Contrast to test builds for security vulnerabilities
	Contrast Security ADR with CrowdStrike Falcon	Contrast Security ADR with CrowdStrike Integrate Contrast ADR with SIEM tools Sends attack events to CrowdStrike
	Contrast Security ADR with Datadog	Datadog with ADR Integrate Contrast ADR with SIEM tools Sends attack events to the Datadog application
	Contrast Security for Eclipse Marketplace	Eclipse IDE plugin View vulnerability information directly in the Eclipse IDE for faster remediation
	Azure Service Fabric with the .NET Framework or .NET Core	Azure Service Fabric Embeds the Contrast Security agent directly into microservices running on Azure Service Fabric
	Webhooks	Generic Webhooks Supports generic webhook integration to receive notifications at any URL that receives POST messages
	GitHub Integration	Github Integrate GitHub source code management (SCM) with Contrast technologies
	Contrast Security ADR with Google Security Operations	Contrast Security ADR with Google Security Operations Integrate Contrast ADR with SIEM tools Send attack events to Google Security Operations
	Gradle Plugin Gradle.org and Contrast Plugin Contrast Gradle Plugin Source Code Sample Project	Gradle Continuous integration and build tool Verify applications for new vulnerabilities
	Contrast Security ADR with IBM QRadar	Contrast Security ADR with IBM QRadar Integrate Contrast ADR with SIEM tools Send incident details to contextualize incidents with other threat detection and response solutions
	Contrast Intellij Plugin Contrast Security for Intellij Marketplace	Intellij IDE plugin Brings real-time security intelligence directly into IntelliJ
	Jenkins Plugin Contrast Continuous Application Security Jenkins Source Code	Jenkins Continuous integration (CI) tool Automates the process of building, testing, deploying, and running applications
	Jira integration	Jira Automatically generate tickets, synchronize comments, and push notifications for your applications
	Maven Plugin Maven Central Repository Contrast Maven Plugin Source Code Sample Project	Maven A tool that builds, packages, and tests your Java applications
	Microsoft Entra ID SCIM	Microsoft Entra ID Supports user and group provisioning from Microsoft Entra ID
	Contrast Security ADR with Microsoft Sentinel	Microsoft Sentinel with ADR Integrate Contrast ADR with SIEM tools Send incident details to contextualize incidents with other threat detection and response solutions
	Teams Integration	Microsoft Teams Receive notifications from Contrast in your configured Microsoft Teams instance
	PagerDuty Integration	PagerDuty Incident management system Receive attack notifications from Contrast
	Serena Business Manager Integration	Solutions Business Manager (formerly Serena) Integrate to receive notifications from Contrast
	ServiceNow integration	ServiceNow Integrate Contrast with your platform tools Automatically generate incidents in ServiceNow
	ServiceNow AVR integration	ServiceNow Application Vulnerability Response Integrate Contrast with your platform tools Helps streamline vulnerability response and maintain an accurate security posture within ServiceNow
	Slack integration	Slack Receive notifications using a format similar to in-app notifications
	Splunk on-call	Splunk (formerly VictorOps) Provides actionable and timely application threat intelligence across your entire application portfolio
	Contrast Security ADR with Splunk	Splunk with ADR Integrate Contrast ADR with SIEM tools Send detected attack events to a Splunk HTTP Event Collector
	Contrast Security ADR with Sumo Logic	Sumo Logic with ADR Integrate Contrast ADR with SIEM tools Send attack events to the Sumo Logic application
	Contrast Security ADR Universal Forwarder	Universal Forwarder with ADR Integrate Contrast ADR with SIEM tools Send attack events to your application
	VictorOps integration	VictorOps Is now Splunk on-call
	Visual Studio Plugin Contrast for Visual Studio Marketplace	Visual Studio Integrate security vulnerabilities with Contrast Assess and Contrast Scan
	Visual Studio Code Plugin Contrast Security Plugin Marketplace	Visual Studio Code Integrate security vulnerabilities with Contrast Assess and Contrast Scan
	Visual Studio for Mac Plugin Extension file	Visual Studio for Mac See vulnerability information for instrumented applications from the Visual Studio for Mac IDE
	Wiz integration	Wiz Send an application's runtime security information to a Wiz deployment

Northstar

	Bidirectional sync with Jira	Bidrectional sync for incidents with Jira Integrates with Jira to streamline security workflows for both Security Operations and AppSec teams
	Contrast Security ADR with CrowdStrike Falcon	CrowdStrike with ADR Integrate Contrast ADR with SIEM tools Sends attack events, observations, and incidents to CrowdStrike
	Contrast Security ADR with Datadog	Datadog with ADR Integrate Contrast ADR with SIEM tools Sends attack events, observations, and incidents to the Datadog application
	Contrast Security ADR with Google Security Operations	Google Security Operations with ADR Integrate Contrast ADR with SIEM tools Send attack events, observations, and incidents to Google Security Operations
	Contrast Security ADR with IBM QRadar	IBM QRadar with ADR Integrate Contrast ADR with SIEM tools Send detected attack events to an Event Collector
	GitHub app	GitHub app for Northstar The app handles discovery, authorization, and workflow deployment automatically
	Microsoft Entra ID SCIM	Microsoft Entra ID Supports user and group provisioning from Microsoft Entra ID
	Contrast Security ADR with Microsoft Sentinel	Microsoft Sentinel with ADR Integrate Contrast ADR with SIEM tools Send incident details to contextualize incidents with other threat detection and response solutions
	ServiceNow bidirectional sync integration	ServiceNow with bidirectional sync Enable ingestion of Contrast incident data, observables, and related vulnerabilities into a centralized incident management workspace
	Contrast Security ADR with Splunk	Splunk with ADR Integrate Contrast ADR with SIEM tools Send detected attack events and observations to a Splunk HTTP Event Collector
	Contrast Security ADR with Sumo Logic	Sumo Logic with ADR Integrate Contrast ADR with SIEM tools Send attack events, observations, and incidents to the Sumo Logic application
	Contrast Security ADR Universal Forwarder	Universal Forwarder with ADR Integrate Contrast ADR with SIEM tools Send attack events, observations, and incidents to your application

Extended and third-party integrations

Integrate Contrast with your existing tools to streamline your workflows.

AWS

AWS Elastic Beanstalk

Java agent with AWS Elastic Beanstalk

Azure

Microsoft Azure

.NET and Azure App Service

.NET and Azure Arm

.NET and Terraform

Azure Active Directory

Azure Active Directory single sign-on (SSO) integration

Contrast SDKs and Webhooks

	Contrast CLI Contrast CLI NPM
	Java SDK Contrast Java SDK
	JavaScript SDK Contrast SDK Javascript NPM
	.NET SDK Contrast SDK .NET nuget
	Python SDK Contrast SDK Python

GitHub and GitHub actions

Learn about the different ways you can integrate Contrast technologies with GitHub

	Contrast Amazon Elastic Kubernetes Service Build Deploy Contrast Amazon EKS Build Deploy
	Contrast Azure Kubernetes Service Build Deploy Contrast AKS Build Deploy
	Contrast Azure Spring Cloud Deploy Azure Spring Cloud Deploy
	Contrast SCA Action Contrast SCA Action
	Contrast Scan Analyze Contrast Scan Analyze
	Contrast Verify Contrast Verify