Try Contrast for free
Contrast CVE Shield monitors your running applications and APIs to detect real, active use of known CVEs, giving you real-time visibility into which vulnerabilities are actually reachable and under attack in your software. You can try Contrast CVE Shield for free.
No credit card required. No time limit.
Who Contrast CVE Shield is for
Application Security Engineers who own signal quality across the whole vulnerability lifecycle and need to know which code-time findings are real once runtime context is applied, so they can prioritize the ones actually worth acting on.
Developers who need one specific, runtime-verified answer, whether the CVE flagged in their code is actually reachable, so they know if a fix is required right now.
Security Operations teams who need to know the moment a CVE is being actively exploited in their environment, so they can contain it.
CISOs who need a periodic, rolled-up view of which CVEs are driving the organization's overall exposure and whether that exposure is trending up or down.
What CVE Shield is not
It's not a static scanner. It doesn't scan code repositories or binaries.
It's not a network-layer tool. CVE Shield operates at the application runtime layer, watching what your application actually does, not traffic at the network perimeter.
It's not a full ADR solution. Advanced features like virtual patches, IP management, and SIEM integrations live in Contrast's broader ADR product.
It's monitoring first. CVE Shield tells you what's happening, what's reachable, what's being used, what's under attack, so you know where to focus. It doesn't yet stop attacks or replace patching the underlying vulnerability.
What's included
Contrast CVE Shield Free Entry offers support for:
Real-time attack detection for 1 user and up to 2 apps with a maximum of 12 services. Hosts are unlimited at all tiers. See Learn about Northstar to understand how observations, issues, and incidents work.
CVE attack visibility in the Contrast Insights dashboard, including Incidents, Issues, Observations, and Explorer.
14 days of attack history
If you need more users, apps, or services, longer history, or the ability to block attacks, paid CVE Shield plans are available.
Get started
Sign up for Contrast CVE Shield Free at https://cs004.contrastsecurity.com/login.
Once you’re in, follow the Agent wizard to connect your first application and add your first service.