Strengths
- Contrast secures applications from within using live in-app runtime visibility and protection.
- Contrast achieved unicorn status through a $150M Series E at greater than $1B valuation.
Diligence report
Contrast Security
Contrast Security Startup Diligence Research Report
Public evidence supports a real company with material product and financing signals in Enterprise application and API security; underwriting should focus on Stale 2021 unicorn valuation with no audited public financials; Crowded AppSec/ASPM/ADR market with platform repositioning risk; Enterprise telemetry and AI-remediation claims require security validation.
Company profile
Contrast Security Startup Diligence Research Report
Contrast Security appears eligible as an uncovered private unicorn based on CB Insights/current public screens, but the diligence case is incomplete without private financial, customer, cap-table, legal and security records.
- Website
- www.contrastsecurity.com
- Sector
- Enterprise application and API security
- Geography
- United States - Pleasanton/Los Altos, California
- Stage
- Private unicorn / growth-stage cybersecurity company
- Known aliases
- Contrast Security Inc., Contrast
- Report version
- 1.0
- Timezone
- UTC
Executive summary
Risks
- Stale public valuation and opaque financial quality
- Crowded AppSec and platform-consolidation market
- AI/runtime efficacy and integration risk
- Customer concentration and renewal quality unknown
- Enterprise GTM productivity not public
Gaps
- Audited financial statements, ARR/revenue bridge, cash runway and board-approved plan.
- Cap table, financing documents, preference stack, debt and option schedule.
- Customer concentration, retention/churn, current contract status and reference calls.
- Security/privacy/legal/IP/insurance records and counsel confirmation.
Risk register
R-002: Crowded AppSec and platform-consolidation market
Contrast competes against specialist AST/SCA vendors and larger security platforms that can bundle adjacent capabilities.
Diligence request: Run competitive win/loss calls, pricing benchmark and POC against top alternatives.
R-001: Stale public valuation and opaque financial quality
Latest public unicorn valuation anchors to 2021/CB Insights; audited revenue, ARR, margins and burn are not public.
Diligence request: Request audited financials, ARR bridge, bookings, gross margin by product, burn/runway and board-approved plan.
R-003: AI/runtime efficacy and integration risk
AI SmartFix and runtime instrumentation claims require validation for coverage, latency, false positives and secure remediation quality.
Diligence request: Perform technical diligence, customer telemetry review and red-team validation.
R-004: Customer concentration and renewal quality unknown
Named logos do not disclose ARR, current contract status, expansion, churn or customer concentration.
Diligence request: Request top-customer revenue, cohorts, NRR/GRR, churn reasons and reference calls.
R-006: Security-trust and data-processing exposure
Security products embedded in customer apps may process sensitive telemetry; trust artifacts and contractual risk allocation are not public.
Diligence request: Review SOC2/ISO reports, DPA, incident history, insurance and indemnity caps.
R-008: Exit timing and secondary-market valuation risk
No obvious exit found, but the 2021 valuation may not reflect current software multiples or later preference stack.
Diligence request: Request cap table, preference stack, recent secondary marks and board financing alternatives.
R-005: Enterprise GTM productivity not public
Sales cycle, quota attainment, partner contribution and CAC payback are not publicly disclosed.
Diligence request: Request pipeline, bookings by channel, sales productivity and forecast accuracy.
R-007: IP ownership and patent defensibility not enumerated
Company claims patented sensors but public diligence lacks a full patent, license and open-source schedule.
Diligence request: Request patent schedule, invention assignments, OSS scans and infringement opinions.
01Financial Information
Financial Information review for Contrast Security found public evidence for EC-001, EC-002, EC-010, EC-011 and material private-data gaps that should be closed before investment or acquisition reliance.
I.A Annual and quarterly financial information for the past three years
not publicly verifiable confidence: low
Annual and quarterly financial information for the past three years is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Audited statements, monthly management reports, backlog, AR aging and gross margin by product/channel/geography are private.
Hidden risks
- Stale public valuation and opaque financial quality
Follow-up questions
- Request company-provided evidence for annual and quarterly financial information for the past three years mapped to checklist item(s) I.A.1, I.A.2, I.A.3, I.A.4, I.A.5, I.A.6.
| metric | public signal | verification status | diligence request |
|---|---|---|---|
| ARR / revenue | No audited revenue or ARR public in screened sources | not_publicly_verifiable | Audited financials, ARR bridge, gross margin, retention/churn, customer concentration and cash runway |
| Gross margin / unit economics | not_publicly_verifiable | not_publicly_verifiable | CAC, payback, sales efficiency, support cost and product gross margin |
| Backlog / AR aging / plan vs actual | not_publicly_verifiable | not_publicly_verifiable | Management reporting package, monthly KPIs, forecast accuracy and AR aging schedule |
I.B Financial Projections
not publicly verifiable confidence: low
Financial Projections is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Board-approved projections, scenario model, pricing assumptions, capex plan and external financing assumptions are private.
Follow-up questions
- Request company-provided evidence for financial projections mapped to checklist item(s) I.B.1, I.B.2, I.B.3, I.B.4, I.B.5, I.B.6, I.B.7, I.B.8.
I.C Capital Structure
not publicly verifiable confidence: low
Capital Structure is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Current cap table, stockholder list, options/warrants/notes, debt instruments and off-balance-sheet liabilities are private.
Hidden risks
- Exit timing and secondary-market valuation risk
Follow-up questions
- Request company-provided evidence for capital structure mapped to checklist item(s) I.C.1, I.C.2, I.C.3, I.C.4, I.C.5.
| stakeholder | public position | diligence caveat |
|---|---|---|
| Founders / management | Founder/CTO and executive team publicly identified | Ownership percentages, vesting, options, warrants and debt not public |
| Growth investors | Named financing participants and CB Insights investors | Share classes, preferences and control rights require financing documents |
| Employees/options/debt holders | not_publicly_verifiable | Request current cap table, option pool, SAFEs/notes, debt and 409A/common valuations |
I.D Other financial information
partially verified confidence: low
Other financial information has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- Stale public valuation and opaque financial quality
- Exit timing and secondary-market valuation risk
Follow-up questions
- Request company-provided evidence for other financial information mapped to checklist item(s) I.D.1, I.D.2, I.D.3.
| date | round | lead or participants | amount | post money | source |
|---|---|---|---|---|---|
| 2021-11-09 | Series E | Liberty Strategic Capital; Warburg Pincus, Battery, General Catalyst, M12, AXA, Acero | $150M | $1.0B | Public unicorn/funding sources |
| not_publicly_verifiable | Prior rounds / debt | Not fully public | not_publicly_verifiable | not_publicly_verifiable | Request data room schedule |
Amounts and post-money values should be reconciled to financing documents.
02Products
Products review for Contrast Security found public evidence for EC-003, EC-004 and material private-data gaps that should be closed before investment or acquisition reliance.
II.A Description of each product
verified confidence: medium
Description of each product has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- AI/runtime efficacy and integration risk
Follow-up questions
- Request company-provided evidence for description of each product mapped to checklist item(s) II.A.1, II.A.2, II.A.3, II.A.4, II.A.5, II.A.6.
| product | audience | key features | verification status |
|---|---|---|---|
| Contrast ADR | Security/SecOps | Application Detection and Response to detect and respond to attacks in running applications | verified |
| Contrast AST | AppSec/developers | Application and API security testing, including Assess, SCA and Scan surfaces | verified |
| Contrast One | Enterprise managed service | Managed runtime security combining platform with AppSec expertise | partially_verified |
| Contrast AI SmartFix / Graph | Developers and SecOps | AI remediation guidance and runtime graph context; public performance metrics undisclosed | partially_verified |
| package or comparator | public pricing signal | verification status | caveat |
|---|---|---|---|
| Contrast platform packaging | Quote-based enterprise packaging | not_publicly_verifiable | Public nav shows pricing-and-packaging page but not public rates |
| Competitors | Often seat/app/API-volume based in AppSec market | inconclusive | Requires direct quotes against Snyk, Veracode, Checkmarx, Palo Alto, Rapid7 and ASPM tools |
03Customer Information
Customer Information review for Contrast Security found public evidence for EC-005, EC-012 and material private-data gaps that should be closed before investment or acquisition reliance.
III.A Top customers by application
partially verified confidence: low
Top customers by application has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- Customer concentration and renewal quality unknown
Follow-up questions
- Request company-provided evidence for top customers by application mapped to checklist item(s) III.A.
| customer or segment | application | public evidence | verification status |
|---|---|---|---|
| Citizens Bank | Financial services | Named as a company following Contrast plan | partially_verified |
| Backbase | Financial technology | Named as a company following Contrast plan | partially_verified |
| AARP | Membership/nonprofit | Named as a company following Contrast plan | partially_verified |
| UTIMCO | Institutional investment management | Quote about telemetry improving security posture | partially_verified |
III.B Strategic relationships
verified confidence: medium
Strategic relationships has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for strategic relationships mapped to checklist item(s) III.B.
| partner | nature | public evidence | verification status |
|---|---|---|---|
| Liberty Strategic Capital | Series E lead / board influence | Led 2021 Series E | verified |
| Warburg Pincus / Battery / General Catalyst / M12 / AXA / Acero | Existing investors | 100% participation in Series E per release | verified |
| AWS Marketplace | Cloud marketplace distribution | Marketplace listing for ADR | partially_verified |
III.C Revenue by customer
not publicly verifiable confidence: low
Revenue by customer is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Revenue by customer and any greater-than-5-percent concentration schedule are private.
Follow-up questions
- Request company-provided evidence for revenue by customer mapped to checklist item(s) III.C.
III.D Significant relationships severed within the last two years
not publicly verifiable confidence: low
Significant relationships severed within the last two years is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Severed customer, partner or supplier relationships over the last two years require company confirmation.
Follow-up questions
- Request company-provided evidence for significant relationships severed within the last two years mapped to checklist item(s) III.D.
III.E Top suppliers
verified confidence: medium
Top suppliers has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for top suppliers mapped to checklist item(s) III.E.
| supplier or dependency | role | public evidence | verification status |
|---|---|---|---|
| Cloud marketplaces | Distribution/procurement route | AWS Marketplace listing observed; cloud hosting dependency not disclosed | partially_verified |
| Customer applications and APIs | Embedded runtime sensors depend on customer integration quality | Public architecture implies in-app instrumentation | verified |
| AI model/tooling providers | AI SmartFix/MCP interoperability | Model/vendor dependencies not disclosed publicly | not_publicly_verifiable |
04Competition
Competition review for Contrast Security found public evidence for EC-009 and material private-data gaps that should be closed before investment or acquisition reliance.
IV.A Competitive landscape by market segment
verified confidence: medium
Competitive landscape by market segment has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- Crowded AppSec and platform-consolidation market
Follow-up questions
- Request company-provided evidence for competitive landscape by market segment mapped to checklist item(s) IV.A.1, IV.A.2.
| competitor | segment | product overlap | source or gap |
|---|---|---|---|
| Snyk | Developer security / SCA / code security | High product overlap in developer-first security; private/public valuation pressure relevant | independent market comparison required |
| Veracode | Application security testing | Direct AST/DAST/SCA overlap with enterprise buyers | independent market comparison required |
| Checkmarx | AST / AppSec platform | Overlaps with SAST/SCA/API security programs | independent market comparison required |
| Palo Alto / Wiz / ASPM entrants | Cloud/AppSec platform consolidation | Large platforms may bundle posture management and runtime signals | inferred from category |
| axis | target position | competitor position or gap | evidence claim |
|---|---|---|---|
| Runtime instrumentation depth | Strong public positioning | Competitors vary; verify with POCs | EC-004 |
| Developer workflow fit | Claims fast remediation and AI guidance | Snyk/Checkmarx/Veracode compete heavily | EC-008 |
| Enterprise trust/compliance | Trust center and named sectors | Requires SOC2/security artifacts | EC-014 |
05Marketing, Sales, and Distribution
Marketing, Sales, and Distribution review for Contrast Security found public evidence for EC-007, EC-013 and material private-data gaps that should be closed before investment or acquisition reliance.
V.A Strategy and implementation
partially verified confidence: low
Strategy and implementation has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for strategy and implementation mapped to checklist item(s) V.A.1, V.A.2, V.A.3, V.A.4.
| channel | public evidence | gap |
|---|---|---|
| Direct enterprise sales | Global expansion and enterprise sectors cited | Pipeline, sales cycle and quota not public |
| Partner/channel/GSI | Partner program links and portals public | Revenue contribution by channel not public |
| Cloud marketplaces | AWS Marketplace listing visible | Marketplace revenue weight not public |
| Owned content/reports | Threat reports, Gartner report and buyer guides promoted | Lead conversion not public |
| signal | observed evidence | evidence claim |
|---|---|---|
| Threat Report / Gartner content | Owned demand-generation assets are prominent in navigation | EC-013 |
| Industry pages | Technology, financial services, healthcare and insurance pages signal vertical GTM | EC-013 |
| Award badges | Public about page shows cybersecurity award badges | EC-004 |
V.B Major Customers
verified confidence: medium
Major Customers has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- Customer concentration and renewal quality unknown
Follow-up questions
- Request company-provided evidence for major customers mapped to checklist item(s) V.B.1, V.B.2, V.B.3.
V.C Principal avenues for generating new business
verified confidence: medium
Principal avenues for generating new business has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for principal avenues for generating new business mapped to checklist item(s) V.C.
V.D Sales force productivity model
not publicly verifiable confidence: low
Sales force productivity model is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Quota, sales-cycle, attainment, compensation and sales productivity data are private.
Hidden risks
- Enterprise GTM productivity not public
Follow-up questions
- Request company-provided evidence for sales force productivity model mapped to checklist item(s) V.D.1, V.D.2, V.D.3, V.D.4.
V.E Ability to implement marketing plan with current and projected budgets
not publicly verifiable confidence: low
Ability to implement marketing plan with current and projected budgets is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Marketing budget, CAC, payback and forecast capacity are not public.
Hidden risks
- Enterprise GTM productivity not public
Follow-up questions
- Request company-provided evidence for ability to implement marketing plan with current and projected budgets mapped to checklist item(s) V.E.
06Research and Development
Research and Development review for Contrast Security found public evidence for EC-008 and material private-data gaps that should be closed before investment or acquisition reliance.
VI.A Description of R&D organization
verified confidence: medium
Description of R&D organization has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for description of r&d organization mapped to checklist item(s) VI.A.1, VI.A.2, VI.A.3.
| name or role | role | public background |
|---|---|---|
| Jeff Williams | Co-founder & CTO | OWASP founder/Top 10 creator; security leadership background |
| Faya Peng | Chief Product Officer | Leads runtime security platform and ADR product strategy |
| David Lindner | CISO / Contrast Labs | Threat-intelligence and appsec leadership |
VI.B New Product Pipeline
partially verified confidence: low
New Product Pipeline has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- AI/runtime efficacy and integration risk
Follow-up questions
- Request company-provided evidence for new product pipeline mapped to checklist item(s) VI.B.1, VI.B.2, VI.B.3, VI.B.4.
| project or capability | status | public signal or gap |
|---|---|---|
| Contrast Graph | Commercial platform capability | Runtime intelligence model for application/API ecosystem |
| AI SmartFix | Publicly promoted capability | AI-assisted remediation claims need efficacy testing |
| ADR category expansion | Emerging category | GTM and category leadership not yet financially verified |
07Management and Personnel
Management and Personnel review for Contrast Security found public evidence for EC-006 and material private-data gaps that should be closed before investment or acquisition reliance.
VII.A Organization Chart
verified confidence: medium
Organization Chart has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for organization chart mapped to checklist item(s) VII.A.
VII.B Historical and projected headcount by function and location
verified confidence: medium
Historical and projected headcount by function and location has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for historical and projected headcount by function and location mapped to checklist item(s) VII.B.
| period | public headcount anchor | public evidence or gap |
|---|---|---|
| 2021 Series E | not_publicly_verifiable | Company planned global expansion but did not disclose headcount in release |
| 2026 public site | not_publicly_verifiable | Current employee count by function/location not public |
VII.C Senior management biographies
verified confidence: medium
Senior management biographies has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for senior management biographies mapped to checklist item(s) VII.C.
| name | role | prior roles or notes |
|---|---|---|
| Rick Fitz | Chief Executive Officer | Former Splunk SVP/GM; enterprise software scaling background |
| Jeff Williams | Co-Founder & Chief Technology Officer | Application-security and OWASP background |
| David Lindner | Chief Information Security and Data Privacy Officer | Application-security professional and Contrast Labs lead |
| Faya Peng | Chief Product Officer | Global product strategy for runtime security/ADR |
| Shay Mowlem | Chief Marketing Officer | Software marketing leadership from NinjaOne, Illumio, Rubrik, MuleSoft and Splunk |
VII.D Compensation arrangements
not publicly verifiable confidence: low
Compensation arrangements is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Employment agreements, benefits, severance and compensation arrangements are private.
Follow-up questions
- Request company-provided evidence for compensation arrangements mapped to checklist item(s) VII.D.1, VII.D.2.
VII.E Incentive stock plans
not publicly verifiable confidence: low
Incentive stock plans is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Equity incentive plan, grants, vesting and refresh practices are private.
Follow-up questions
- Request company-provided evidence for incentive stock plans mapped to checklist item(s) VII.E.
VII.F Significant employee relations problems, past or present
not publicly verifiable confidence: low
Significant employee relations problems, past or present is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Employee-relations complaints, investigations and settlements require HR/counsel confirmation.
Follow-up questions
- Request company-provided evidence for significant employee relations problems, past or present mapped to checklist item(s) VII.F.
VII.G Personnel Turnover
not publicly verifiable confidence: low
Personnel Turnover is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Two-year turnover by function/location and regretted attrition are private.
Follow-up questions
- Request company-provided evidence for personnel turnover mapped to checklist item(s) VII.G.1, VII.G.2.
| person or group | public signal | diligence request |
|---|---|---|
| Senior-management departures | not_publicly_verifiable in screened sources | Two-year turnover report, regretted departures, offer acceptance, attrition by function/location |
| Employee relations issues | not_publicly_verifiable in screened sources | HR complaints, litigation, employee engagement, severance and retention plans |
08Legal and Related Matters
Legal and Related Matters review for Contrast Security found public evidence for EC-014 and material private-data gaps that should be closed before investment or acquisition reliance.
VIII.A Pending lawsuits against the Company
not publicly verifiable confidence: low
Pending lawsuits against the Company is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Complete litigation docket search and counsel letter are required.
Follow-up questions
- Request company-provided evidence for pending lawsuits against the company mapped to checklist item(s) VIII.A.
| matter | status | diligence request |
|---|---|---|
| No material lawsuit identified in public screen | not_publicly_verifiable | Need litigation search in state/federal dockets and counsel confirmation |
VIII.B Pending lawsuits initiated by Company
not publicly verifiable confidence: low
Pending lawsuits initiated by Company is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Plaintiff-side litigation schedule is not public.
Follow-up questions
- Request company-provided evidence for pending lawsuits initiated by company mapped to checklist item(s) VIII.B.
| matter | status | diligence request |
|---|---|---|
| No material plaintiff-side lawsuit identified in public screen | not_publicly_verifiable | Need docket search and counsel schedule |
VIII.C Environmental and employee safety issues and liabilities
partially verified confidence: low
Environmental and employee safety issues and liabilities has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for environmental and employee safety issues and liabilities mapped to checklist item(s) VIII.C.1, VIII.C.2.
VIII.D Material patents, copyrights, licenses, and trademarks
partially verified confidence: low
Material patents, copyrights, licenses, and trademarks has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Hidden risks
- IP ownership and patent defensibility not enumerated
Follow-up questions
- Request company-provided evidence for material patents, copyrights, licenses, and trademarks mapped to checklist item(s) VIII.D.
| asset | jurisdiction or source | status or gap | verification status |
|---|---|---|---|
| Patented in-app sensors | United States / global likely | Publicly claimed; patent numbers not enumerated in public report | partially_verified |
| Contrast trademarks/logos/product names | Trademark jurisdictions not collected | Need USPTO/WIPO/EUIPO schedule | not_publicly_verifiable |
VIII.E Insurance coverage and material exposures
not publicly verifiable confidence: low
Insurance coverage and material exposures is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Insurance policies, retentions, exclusions and claim history are private.
Hidden risks
- Security-trust and data-processing exposure
Follow-up questions
- Request company-provided evidence for insurance coverage and material exposures mapped to checklist item(s) VIII.E.
VIII.F Material contracts
not publicly verifiable confidence: low
Material contracts is not fully publicly verifiable for Contrast Security; public sources provide context but transaction-grade records must be requested.
Evidence gaps
- Material contracts, termination rights, indemnities and change-of-control provisions are private.
Hidden risks
- Security-trust and data-processing exposure
Follow-up questions
- Request company-provided evidence for material contracts mapped to checklist item(s) VIII.F.
| contract or policy | public gap | priority |
|---|---|---|
| Enterprise customer MSAs | Material terms, SLAs, indemnities and termination rights not public | high diligence priority |
| Insurance policies | Cyber/E&O/D&O coverage not public | medium diligence priority |
VIII.G Regulatory agency problems
partially verified confidence: low
Regulatory agency problems has public evidence for Contrast Security, but should be reconciled to company records and third-party confirmations.
Evidence gaps
- Public evidence is directional; private records and direct confirmations are required for transaction-grade diligence.
Follow-up questions
- Request company-provided evidence for regulatory agency problems mapped to checklist item(s) VIII.G.
| agency or topic | action or exposure | status | verification status |
|---|---|---|---|
| Privacy/cookie and security trust representations | Company website / customer trust | Public trust center exists; security certifications need artifact review | inconclusive |
Evidence
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists Contrast Security as a current unicorn with a $1B valuation and 2021 date joined. | verified high | SRC-001 |
| EC-002 | Contrast announced a $150M Series E at a greater-than-billion-dollar valuation led by Liberty Strategic Capital. | verified high | SRC-002 |
| EC-003 | Contrast markets a runtime application-security platform spanning ADR and AST products. | verified high | SRC-003 |
| EC-004 | Contrast claims patented in-app sensors and a unified platform purpose-built for live application-layer attacks. | verified medium | SRC-004 |
| EC-005 | Contrast publicly names Citizens Bank, Backbase, AARP and UTIMCO as customer/adoption references. | partially verified medium | SRC-004 |
| EC-006 | Contrast discloses a senior leadership team including Rick Fitz, Jeff Williams, David Lindner, Faya Peng and Shay Mowlem. | verified high | SRC-005 |
| EC-007 | Contrast reports global expansion and customer adoption in EMEA/APAC as use of Series E proceeds. | partially verified medium | SRC-002 |
| EC-008 | Contrast positions AI SmartFix and Contrast Graph as newer product/R&D directions. | partially verified medium | SRC-003 |
| EC-009 | Contrast competes in application security testing, runtime security, API security and ASPM categories. | verified medium | SRC-003SRC-007SRC-008 |
| EC-010 | Detailed financial statements, customer concentration, churn, sales productivity and cap-table terms are not public. | not publicly verifiable high | SRC-001SRC-002 |
| EC-011 | No obvious IPO, acquisition or shutdown result was found in the public search screen; CB Insights still lists the company. | partially verified low | SRC-001SRC-009 |
| EC-012 | Contrast exposes customer and partner portals and partner-program surfaces. | verified medium | SRC-004 |
| EC-013 | Contrast operates in sectors including technology, financial services, healthcare and insurance. | verified medium | SRC-004 |
| EC-014 | Legal, IP ownership, insurance coverage and material contracts require diligence beyond public pages. | not publicly verifiable high | SRC-004SRC-010 |
| ID | Publisher | Title | Accessed |
|---|---|---|---|
| SRC-001 | CB Insights | The Complete List Of Unicorn Companies | 2026-06-15 |
| SRC-002 | PR Newswire / Contrast Security | Contrast Security Closes $150M Series E Funding Led by Liberty Strategic Capital | 2026-06-15 |
| SRC-003 | Contrast Security | Contrast Runtime Security Platform for Application Security | 2026-06-15 |
| SRC-004 | Contrast Security | About Us | Get Secure Code Moving | 2026-06-15 |
| SRC-005 | Contrast Security | Leadership | Contrast Security | 2026-06-15 |
| SRC-006 | Contrast Security | Contrast Security customer-success pages | 2026-06-15 |
| SRC-007 | Gartner Peer Insights | Contrast Security reviews and application-security testing market page | 2026-06-15 |
| SRC-008 | Amazon Web Services Marketplace | AWS Marketplace - Contrast Security Application Detection and Response | 2026-06-15 |
| SRC-009 | DuckDuckGo HTML Search | DuckDuckGo search results for Contrast Security IPO acquired private company | 2026-06-15 |
| SRC-010 | Contrast Security | Contrast Security Trust Center | 2026-06-15 |
Disclaimer
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.