Contrast Security

Contrast Security helps developers find and fix application security risks in real-time by automatically detecting and fixing vulnerabilities, identifying attacks, defending applications, and stopping attacks in real-time. Contrast embeds lightweight agents directly into code that detect real vulnerabilities. For detailed information refer to the Contrast Security’s official documentation.

Integration Method: API

Tables: Detection Finding (2004)

This integration supports the following event.

This integration supports the following versions.

Note:

As for this document preparation, the latest release was in February 2025.

Prerequisites

• Access to the Contrast Security portal.

• Able to create Contrast Security API Keys which includes organization ID, API key and authorization header.

• Access to the DataBee console to add the feed.

Configuration Overview

1. Get the API keys from contrast security portal.

2. Add the Contrast Security data feed in the DataBee console with the below parameters.

   DataBee Parameter	Contrast Security Parameter
   Access Key	API Key
   Secret Key	Authorization Header
   Organization’s UUID	Organization ID

Contrast Security Configuration

1. Login to your Contrast Security Dashboard.

   

2. Open User settings

   1. Navigate to profile.

   2. Select User Settings.

   

3. Get the API keys

   1. Go to Profile page.

   2. Locate Your Keys section.

   3. Copy Organization ID and API Key.

   4. Copy the Authorization Header and save these details for later use.

   

   Note:

   Rotating the Service Key will generate a new Authorization Header, which must be updated in your DataBee feed.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.

   

2. Search for Contrast Security and click it as shown below.

   

3. Click on the API Ingest option for collection method.

   

4. Enter feed contact information and click Next.

   

5. In the configuration page, confirm the following:

   • Authorization Method: Custom API Key

   • API Base URL: this is the base URL that DataBee will interact with.

   • Access Key: paste the API key.

   • Secret Key: paste the Authorization header.

   • Organization’s UUID: paste the organization’s UUID.

   • Event Types: preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• If you are facing unauthorized (401) error, this might be possibly due to incorrect API Credentials or incorrect organization ID. Please refer to the User settings to retrieve the API details and organization ID.