Contrast ADR Marks One Year with Surging Growth, Expands Reach with New Developer and SecOps-Focused Integrations
Contrast Security's ADR adoption reached 40% of its customer base, reflecting rapid market validation and strong demand for a runtime-native approach to securing applications and APIs in production.
The Northstar release, announced earlier this year, marked a major evolution of the platform. It unified detection, remediation, and observability into a single experience, powered by the Contrast Graph, a real-time behavioral model of the application layer that maps attack surface, defenses, vulnerabilities and more, providing the rich context app/API security demands. Northstar also introduced SmartFix, Contrast's agentic AI for auto-generating validated code fixes, and Deployment Hub with Flex Agent, which makes it easy to scale ADR across complex enterprise environments.
According to Contrast's Software Under Siege 2025 report, application-layer attacks now occur every 3 minutes, yet most security teams lack the runtime context to detect or respond in time.
This week, Contrast is expanding the reach of Northstar with two new ecosystem integrations that make runtime security even more accessible and effective:
GitHub Copilot Integration – Developers can now apply AI-generated fixes that are validated by live runtime evidence, bridging the gap between detection and developer action. Unlike traditional AI suggestions that lack runtime context, Contrast SmartFix works with GitHub Copilot to generate secure code fixes based on runtime vulnerability details, proven exploitability, attack details, defenses available, and context from the Context Graph. This streamlines remediation by delivering ready-to-review pull requests that are both context-aware and safe for production, helping developers fix real issues faster without disrupting their workflow and ship with confidence.
Sumo Logic Integration – Contrast attack telemetry now flows directly into Sumo Logic, enabling SOC teams to triage, investigate, and respond with full application-layer context. Security teams gain real-time visibility into exploit attempts, vulnerable code paths, and application behavior, all enriched through the Contrast Graph. By integrating runtime intelligence into existing SIEM workflows, organizations can stop breaches faster, reduce mean time to detect (MTTD), cut investigation overhead, understand the blast radius and close the loop between AppSec and incident response.
The updates to the Northstar release align with Contrast's vision of securing software across the full lifecycle, from production back to code, with a single, unified platform.
Contrast ADR is the first runtime-native platform for defending applications in production, built to detect, block, and remediate real threats as they happen. By uniting developers, AppSec, and SecOps around the same runtime intelligence, Contrast ADR delivers the shared context teams need to act faster, fix smarter, and stop chasing noise.
'Legacy tools show you possible issues. Contrast ADR shows you what's actually happening, so teams can act fast and act right,' said Jeff Williams, CTO and Co-founder of Contrast. 'From the inside out, Contrast is securing what matters most: the code that's running right now.'
The adoption of ADR has been especially strong in industries with the highest security and compliance demands, including financial services, healthcare, manufacturing, and technology. Organizations in these sectors are replacing legacy scanners and fragmented workflows with Contrast's unified runtime platform to reduce time-to-fix, eliminate false positives, and improve real-world outcomes.
'ADR has always been about helping teams focus on what matters most by seeing what's actually happening within their apps,' said Faya Peng, Head of Product and General Manager of ADR at Contrast Security. 'These new integrations with GitHub Copilot and Sumo Logic just make that easier. Developers and security teams can now work from the same real-time data and take action faster, all within the tools they're already using.'
To see Contrast ADR in action, visit Booth #1861 at Black Hat USA 2025, or learn more at contrastsecurity.com.
About Contrast Security
Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented threat sensors directly into the software, delivering unmatched visibility and protection. With continuous, real-time defense, Contrast uncovers hidden application-layer risks that traditional solutions miss. Contrast's powerful Runtime Security technology equips developers, AppSec teams and SecOps with one platform that proactively protects and defends applications and APIs against evolving threats.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Boston Globe
18 hours ago
- Boston Globe
Healey finds $46 million more for EV charging as Trump tries to slash funding
Get Starting Point A guide through the most important stories of the morning, delivered Monday through Friday. Enter Email Sign Up The new funding, overseen by the state's Department of Environmental Protection, adds to a Advertisement 'We're building on what works and what has worked for us already,' DEP Commissioner Bonnie Heiple said in an interview. 'We need to find ways to make chargers accessible to people who have EVs now or want them in the near future.' Advertisement Meanwhile, the Trump administration has The number of public fast chargers for electric vehicles has nearly tripled in Massachusetts in the past two years to almost 1,500 — and market leader The 216-page assessment from the Advertisement The lack of chargers for trucks along many highways and for people parking on the street 'are the two most important gaps to address,' according to the report from the coordinating council, which includes representatives of most major state agencies, the MBTA, and the Metropolitan Area Planning Commission. Many Massachusetts businesses that rely on trucks 'You know, if you haven't built it, how will they come?' she said. 'Building out that charging infrastructure takes the wind out of the sails of any argument that we're not ready yet.' The council report also called for existing programs, such as the utilities' offerings, to be more focused on needy areas. Eversource and National Grid, the state's two largest utilities, have already exhausted the funds they budgeted in 2024 for subsidizing public fast chargers. But some chargers built with the utility backing would have been built without subsidies, while areas such as along highways in the western and central parts of the state have been left out, according to Assistant Secretary of Energy Josh Ryor, who chairs the council. 'Let's make sure we're deploying these things quickly while also making sure that we're deploying in the areas that have the greatest value to EV drivers,' Ryor said. That could mean encouraging fast chargers built with utility subsidies to areas within 1.5 miles of a highway or in dense residential neighborhoods, he said. Advertisement The report included projections showing increasing demand from EV charging could require upgrades to the state's electrical grid. In a worst case scenario, if all new EV drivers charged at peak times, more than one-quarter of the state's substations would need to be upgraded by 2035. But incentivizing drivers to charge at off-peak times could reduce the number of substation upgrades to as few as 1 out of every 16. The current forecast for 10,500 fast chargers in 2035 should help set priorities, but the exact number needed a decade from now could change, Ryor said. The council is required to report on the state's EV charging infrastructure every two years. 'One of the beauties of having this assessment every two years is we're able to incorporate the best information that we have,' he said. 'There's no one North Star for the number of chargers that we need.' Aaron Pressman can be reached at
Forbes
20 hours ago
- Forbes
AI Coding Agents: Driving The Next Evolution In Software Development
Vikas Mendhe is a solution architect and digital transformation expert specializing in API-driven solutions in financial technology. As artificial intelligence continues to reshape industries, one of the most significant innovations in the software world is the rise of coding agents. They are reshaping how code is written, tested and maintained, marking a new era in software development. What Are Coding Agents? Coding agents are intelligent systems powered by large language models that write, debug and optimize code. They generate APIs, refactor legacy systems, write tests and even build apps with minimal input. Popular tools include GitHub Copilot, Amazon CodeWhisperer and Tabnine. New-generation assistants such as Cursor, Windsurf (recently acquired by OpenAI) and Cline focus on deeper IDE integration, context retention and developer autonomy. Industry Adoption The adoption of coding agents is gaining momentum across sectors. Tech companies are embedding coding assistants into their workflows, startups are exploring autonomous agents like AutoGPT and Devin for rapid prototyping and governments are integrating them cautiously for tasks like data transformation, compliance automation and internal tool development. While accuracy and oversight concerns remain, the shift toward AI-assisted development is well underway. Language-Specific Strengths Of Popular Coding Agents As coding agents continue to evolve, developers often look for tools that best support the languages they work in. • GitHub Copilot thrives in Python, JavaScript and TypeScript, with robust IDE integration. • Amazon CodeWhisperer specializes in Java, Python and JavaScript, featuring AWS-native tools and cloud focus. • Cursor excels in TypeScript and Python, with built-in memory and pair programming. • Tabnine supports Java, Python, C++ and Go with offline capability and customization. • Claude Code optimizes Shell, Python and Bash for terminal-based tasks. • Devin, a Python-based agent, enables complex, multi-step, end-to-end coding automation. Real-World Case Studies Let's just take a look at GitHub Copilot's applications in the real world. ANZ Bank's 2024 trial of GitHub Copilot showed engineers completing tasks 42% faster with improved code quality. Accenture's enterprise study found Copilot users coding 55% faster, with 90% reporting higher fulfillment. And a 2025 ZoomInfo case study involving over 400 developers reported a 33% code acceptance rate and 72% satisfaction. These findings show coding agents reduce repetitive work and free developers for higher-value tasks. Impact On Software Development Coding agents could transform software development from end to end. For developers, they act as smart copilots, automating repetitive tasks and simplifying complex workflows. Businesses gain faster delivery, lower costs and greater agility, turning ideas into prototypes in days instead of weeks. These tools also democratize development: Non-coders can build apps using natural language, and junior developers can produce better code with minimal oversight. Educational studies confirm this potential. AI code completion tools enhance student productivity and engagement while preserving problem-solving and conceptual learning. Programs such as the Stanford Institute for Human-Centered AI are exploring how such tools support computer science education at scale. Behind The Scenes Of Coding Agents Most coding agents are built on transformer-based LLMs such as OpenAI's Codex and GPT-4. Popular tools like GitHub Copilot and Amazon CodeWhisperer operate through IDE plugins, sending prompts to remote model APIs. GPT-4o mini supports a 128K token context window, enabling broader file-level reasoning. Claude 3.7 Sonnet offers 200K tokens for extended reasoning workflows. Gemini 1.5 Pro surpasses both with a 2M token context, ideal for workflows spanning entire codebases. More autonomous agents, such as AutoGPT and Devin, use frameworks like LangChain to chain prompts, memory and shell commands, completing multi-step engineering tasks with minimal human input. Terminal-Based Coding Agents In parallel, new terminal-based coding agents are emerging to support command-line workflows for professional developers. Tools like Claude Code, Codex CLI and Gemini CLI bring AI-powered development directly into the terminal environment, enabling agents to execute commands, write scripts and interact with live file systems, all while preserving developer autonomy. Coding Agents As A Service Despite advances, coding agents can still produce insecure or low-quality code. Safeguards like validation mechanisms and inline linting help, but human oversight remains essential. Rigorous testing, linting and code reviews should be part of every deployment pipeline. Code Quality, Security And The Role Of Supervision Despite advances, coding agents still generate insecure code and lack deep understanding of intent. Recent advancements have introduced better safeguards, validation mechanisms and inline linting. However, ongoing oversight remains essential. This underscores the need for rigorous testing, linting and human code review pipelines before production deployment. Getting Started With AI Coding Agents Before adopting AI coding agents, focus on clear, high-value use cases and choose tools suited to those needs instead of automating everything. Keep humans in the loop by ensuring AI-generated code undergoes rigorous testing, security scans and peer reviews. Research shows nearly half of developers don't fully trust AI output and often spend extra time debugging it. Be mindful of data privacy, intellectual property and licensing rules to avoid compliance issues, and set governance policies to prevent security blind spots and vendor lock-in. To mitigate common pitfalls—such as inaccurate code, scope creep, security risks and hidden costs—start with structured pilot programs that have measurable outcomes. Enterprise case studies show that successful rollouts often begin with controlled experiments, formal risk assessments and well-defined change management plans. Strong guardrails, clear policies and an ongoing review process help organizations capture productivity gains while maintaining quality and security. Conclusion Coding agents are not meant to replace human developers—they are tools that help make their work faster and easier. As more companies start using them, it's important to find the right mix between automation and human control. When used responsibly, coding agents can help teams work more efficiently, come up with new ideas and change the way software is built in the AI era. Everyone, not just developers, should understand what coding agents can and can't do, especially those shaping the future. Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?
Geek Wire
2 days ago
- Geek Wire
GitHub will join Microsoft's CoreAI group with departure of CEO Thomas Dohmke
GitHub CEO Thomas Dohmke. (GitHub Photo) Microsoft will bring GitHub into its CoreAI division with the announcement this morning that GitHub CEO Thomas Dohmke will be stepping down as the leader of the widely used software development platform and code repository. GitHub has operated largely on its own since its acquisition by Microsoft in 2018 for $7.5 billion. However, with the rise of the GitHub Copilot coding assistant and the broader growth of AI-powered software development, GitHub's fortunes are increasingly tied to those of its parent company. Dohmke said in a post Monday morning that he will remain with GitHub through the end of 2025 to help guide the transition before leaving to start a new company. He said his decision was driven by a desire to return to his startup roots after more than a decade at Microsoft and GitHub. 'With more than 1B repos and forks, and over 150 million developers, GitHub has never been stronger than it is today,' he wrote. 'We have seen more open-source projects with more contributions every year. AI projects have doubled in the last year alone. And our presence in companies of any size is unmatched in the market.' GitHub also faces pressure from AI-powered coding tools. In addition to the coding capabilities from OpenAI's ChatGPT and Anthropic's Claude, tools like Cursor have seen meteoric growth, and Google's Alphabet is pushing further into agentic coding with its recruitment of key leaders from AI code generation startup Windsurf. According to Microsoft's recent earnings call, GitHub Copilot now has 20 million users, and enterprise customers grew 75% quarter-over-quarter. Ninety percent of the Fortune 100 use the AI assistant, and AI projects on GitHub more than doubled over the past year, according to the company. Microsoft CEO Satya Nadella said last year that GitHub Copilot had become a larger business on its own than all of GitHub was when Microsoft bought it. Announcing the acquisition in 2018, Microsoft promised that GitHub would 'operate independently to provide an open platform for all developers in all industries.' We've asked Microsoft for more information on the new structure and what it means for GitHub's operations, and we'll update this post as we learn more. Dohmke, who moved from Germany to the United States after selling his startup to Microsoft more than a decade ago, took over as GitHub CEO in 2021 after helping to lead the acquisition alongside Nat Friedman.
