.NET Framework and .NET Core Telemetry
.NET Framework and .NET Core agents use telemetry to collect usage data. Telemetry is collected when an instrumented application first loads the agent’s sensors and then periodically (every few hours) afterwards.
Your privacy is important to us. The telemetry feature doesn't collect application data. The data is anonymized before being sent securely to Contrast. Then the aggregated data is stored encrypted and under restricted access control. Any collected data will be deleted after one year.
The telemetry feature collects the following data:
Agent versions | Data |
|---|---|
.NET Framework later than 2020.8.3 .NET Core later than 1.5.15 | Agent version |
Operating system and version | |
Whether the agent is running in a container | |
Whether the agent is running in Azure App Services | |
Hashed Media Access Control (MAC) address: a cryptographically (SHA256) anonymous and unique ID for a machine | |
Kernel version | |
Process memory page size | |
Process memory working set size | |
Process running time | |
Whether Assess is enabled | |
Whether Protect is enabled | |
.NET Framework later than 2020.8.3 | .NET Framework runtime version |
.NET Core later than 1.5.15 | .NET Core runtime version |
.NET Framework later than 20.9.1 .NET Core later than 1.5.17 | Hosted or on-premises Contrast instance |
.NET Framework later than 20.9.3 .NET Core later than 1.5.19 | CLR Instrumentation Engine (CIE) usage |
Application framework | |
Chained profiler vendor | |
.NET Framework later than 20.10.1 .NET Core later than 1.5.20 | Process hosting mode |
CIE Raw Profiler Hook usage | |
.NET Framework later than 20.10.2 .NET Core later than 1.5.21 | Names of configuration settings with non-default values |
Names of disabled Assess rules | |
HTTP status code and response time summary of communication with Contrast |
To opt-out of the telemetry feature, set the CONTRAST_DOTNET_TELEMETRY_OPTOUT environment variable to 1 or true.
Telemetry data is securely sent to telemetry.dotnet.contrastsecurity.com. You can also opt out of telemetry by blocking communication at the network level.