Contrast Runtime Security has been a solid addition to our AppSec stack, especially for runtime level visibility and protection. The instrumentation-based approach gives us much better context than traditional SAST or network centric tools and we can see the exploitable issues earlier in the lifecycle. Onboarding was smoother in greenfield services than in legacy apps and we had to invest time in agent management and policy tuning to get value.

They are easy and seem responsive to work with. However, the product itself is not designed for our primary deployment model (microservices). It is heavyweight, relatively hard to configure and setup, and expensive for this model.