Contrast Security, a global provider that specializes in application detection and response (ADR), has partnered with Datadog on a new integration that brings Contrast ADR’s verified application runtime intelligence directly into Datadog Cloud SIEM. The integration is intended to enable security operations centers (SOCs) to “distinguish real application-layer exploits from background noise and then stop those attacks,” officials said.
Among the issues facing security teams is many struggle to separate genuine application attacks from the barrage of low-value alerts generated by perimeter tools. WAF alerts, for example, correlate to real exploits less than 0.25 percent of the time, forcing analysts to spend hours manually validating threats, officials said.
Contrast ADR is designed to close this gap by detecting and blocking attacks inside the application itself, then streaming verified alerts, including context, directly into Datadog Cloud SIEM as trusted triggers for automated workflows, the company said.
“Security teams are under pressure to cut mean time to respond (MTTR), but struggle with noisy alerts that lack context,” said Faya Peng, general manager of ADR and head of product at Contrast Security. “By delivering verified runtime intelligence into Datadog, we’re giving SecOps the contextual fidelity to confidently automate triage and response without fear of false positives. Adding Contrast data to the Datadog Cloud SIEM completes the overall security picture, drastically reducing the time required to stop application breaches.”
