# Contrast Security

Contrast Security (contrastsecurity.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/contrast-security
- Documents last verified: 2026-09-29
- Transparency rating: 38/100 (how much it publishes, not how secure it is)
- Cite as: Contrast Security, Third Party Index, https://thirdpartyindex.com/vendors/contrast-security (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.contrastsecurity.com/ | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://trust.contrastsecurity.com/subprocessors | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://www.contrastsecurity.com/privacy-matters | 2026-09-29 | 2026-09-29 |
| Terms | https://www.contrastsecurity.com/legal-terms | 2026-09-29 | 2026-09-29 |
| security.txt | https://www.contrastsecurity.com/.well-known/security.txt | 2026-09-29 | 2026-09-29 |
| Status page | https://status.contrastsecurity.com/ | 2026-09-29 | 2026-09-29 |
| Security advisories | https://www.contrastsecurity.com/disclosure-policy | 2026-09-29 | 2026-09-29 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, TX-RAMP ([evidence](https://thirdpartyindex.com/evidence/17303))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/17303))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 4 reported incidents (3 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 1 h 6 min
- 2026-09-25: Major Outage - Contrast Server - Errors displaying in the UI (major)
- 2026-07-30: Degraded Performance – CS002 (minor)
- 2026-07-30: System Outage – CS-PROD-U010W (critical)
- 2026-07-24: Incident Declared - CS001 & CS004 (major)
- 2026-06-18: Incident Declared – Users may not be able to access Attack Events (new) (minor)
- 2026-06-09: Incident Declared – New Java libraries may not be detected (major)
- 2026-05-22: Incident Declared – CS-PROD-G001S (minor)
- 2026-05-20: Partial Outage – Intermittent failures when users try to logon \[CS-PROD-U008P\] (minor)

## Security contact

From its security.txt (https://www.contrastsecurity.com/.well-known/security.txt):

- Contact: mailto:security@contrastsecurity.com
- Disclosure policy: https://www.contrastsecurity.com/disclosure-policy
- Security jobs: https://www.contrastsecurity.com/contrast-careers

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api