Integrations

Documentation is provided for supported integrations that are part of the core, recommended way that Contrast works. Contrast may be compatible with other tools or scenarios developed by the community that are not supported. For specific information on third-party tools and technologies, consult the documentation for that product. Also, there are additional articles in the Contrast Support Portal around specific use cases or workarounds.

Note

Note that supported integrations are further documented in the left-hand navigation menu. Community integrations are linked to external documentation. Links to documentation in the Contrast Support Portal or third-party sites are indicated by the icon.

You must have the organization administrator role in Contrast to view the integrations available to your organization.

Cloud integrations

Run your application with Contrast while still deploying on your favorite PaaS.

	AWS Elastic Beanstalk	Java agent with AWS Elastic Beanstalk
	AWS Security Hub	AWS Security Hub with Contrast Assess
	AWS Security Lake	AWS Security Lake with Contrast Assess
	Google App Engine	Configure the Java agent for Google App Engine
	Jira Cloud	Jira Cloud integration with Contrast Scan
	Microsoft Azure	.NET and Azure App Service .NET and Azure Arm .NET and Terraform
	Red Hat OpenShift	Contrast Security containers
	VMware Tanzu (formerly Pivotal Cloud Foundry)	Configure Java for VMware Tanzu Configure Node.js for VMware Tanzu

Chat tools

Be the first to know about new vulnerabilities in or active attacks against your application as Contrast discovers these security issues in real-time.

	Microsoft Teams	Teams Integration
	Slack	Slack Integration

Code repository integrations

Add Github actions to your repository.

	Contrast Amazon Elastic Kubernetes Service Build Deploy	Contrast Amazon EKS Build Deploy
	Contrast Azure Kubernetes Service Build Deploy	Contrast AKS Build Deploy
	Contrast Azure Spring Cloud Deploy	Azure Spring Cloud Deploy
	Contrast Scan Action	Contrast SCA Action
	Contrast Scan Analyze	Contrast Scan Analyze
	Contrast Verify	Contrast Verify

Continuous integration and build tools

Add application security gates into your automated pipelines to prevent vulnerabilities from getting deployed into production environments.

	Azure DevOps	Azure Pipelines Extension Azure Pipelines Marketplace
	Bamboo	Bamboo Plugin Contrast Security for Bamboo Marketplace Contrast Bamboo Plugin Source Code
	CircleCI	Orb Registry Contrast Security Orb for CircleCI
	Contrast SCA Action	Contrast SCA Action
	Contrast Scan Analyze	Contrast Scan Analyze
	Contrast Verify	Contrast Verify
	GitLab	How to integrate Contrast in a GitLab pipeline
	Gradle	Gradle Plugin Gradle.org and Contrast Plugin Contrast Gradle Plugin Source Code Sample Project
	Jenkins	Jenkins Plugin Contrast Continuous Application Security Jenkins Source Code
	Maven	Maven Plugin Maven Central Repository Contrast Maven Plugin Source Code Sample Project

Enterprise and extensibility integrations

Use Contrast's SDKs and webhooks to build custom services and/or notify them upon the discovery of new vulnerabilities or attacks using webhooks.

	Azure Active Directory	Azure Active Directory single sign-on (SSO) integration
	Contrast CLI	Contrast CLI NPM
	Java SDK	Contrast Java SDK
	JavaScript SDK	Contrast SDK Javascript NPM
	.NET SDK	Contrast SDK .NET nuget
	Python SDK	Contrast SDK Python
	Webhooks	Generic Webhooks

IDE plugins

Learn about your applications' vulnerabilities and receive remediation guidance while in your favorite development environment.

	Eclipse	Contrast Security for Eclipse Marketplace
	Intellij	Contrast Intellij Plugin Contrast Security for Intellij Marketplace
	Visual Studio	Visual Studio Plugin Contrast for Visual Studio Marketplace
	Visual Studio Code	Visual Studio Code Plugin Contrast Security Plugin Marketplace
	Visual Studio for Mac	Visual Studio for Mac Plugin Extension file

Incident management systems

Be confident that on-call personnel will be equipped to take necessary action against attacks on your application.

PagerDuty

PagerDuty Integration

Splunk on-call

(formerly VictorOps)

VictorOps Integration

SIEM tools

Receive operational insights into application security threats from Contrast's instrumentation activities directly in your security information and event management (SIEM) tool.

	Azure Sentinel	Contrast Protect Azure Sentinel Solution Azure Sentinel
	Datadog	Source Code
	Splunk	How to integrate Contrast with Splunk
	Sumo Logic	Source Code

Work tracking platforms

	Azure Boards	Azure Boards Integrations
	Bugzilla	Bugzilla Integration
	Github	GitHub Integration
	Jira	Jira Integration
	Kenna Security	Kenna toolkit Running Contrast Security tasks
	Rally (formerly CA Agile Central)	Agile Central Integration
	ServiceNow	ServiceNow Integration
	Solutions Business Manager (formerly Serena)	Serena Business Manager Integration
	ThreadFix	Contrast Remote Provider (ThreadFix) Contrast Remote Provider