Dimension scores are derived from public data and fields; weighted into the composite. Reference only.
Kontra has now been merged into Security Compass and is positioned as an application security training platform for developers. It is not a traditional video- or PPT-based security awareness course; instead, it focuses on interactive, immersive Web security simulation training based on real-world enterprise scenarios. Security Compass is headquartered in Toronto, with offices in the United States and the United Kingdom. Its customers span finance, technology, government, the U.S. Department of Defense, and other organizations.
In terms of protection type, Kontra is not a runtime protection or scanning tool. It is an application security training and secure development capability-building product designed to help organizations “shift left,” enabling development teams to understand security risks during the design and coding stages. For deployment, the page explicitly mentions web-based security simulations and training, but does not state whether private or on-premises deployment is supported. It appears suitable for a broad range of organization sizes, with the form covering developer teams from 1-25 to 5001+. In terms of integrations, Security Compass says its solution can integrate directly into existing DevSecOps tools and workflows, and it sits within the same secure design ecosystem as SD Elements, its developer-centric threat modeling product. However, the page does not list specific integration targets. Information on administration, alerts, learning reports, and compliance certifications is not disclosed.
Pricing is not publicly listed. Trials or sales quotes are mainly obtained through Book a Demo and Get Your Free Trial. There is also a 14-day free access option for the OWASP Top 10 for Web course, which is useful for evaluating the course experience before purchase. Payment methods are not specified.
The main advantage is its clear training philosophy: it is developer-focused and emphasizes storytelling, active participation, and realistic enterprise scenarios. Compared with passively watching courses, this approach is more likely to build secure coding awareness. It also benefits from Security Compass’s application security experience and enterprise customer base. The downside is that the publicly available information is mostly marketing-oriented. Details such as the course catalog, learning management capabilities, assessment mechanisms, certificates, language support, pricing, and compliance materials are missing, so procurement evaluation still requires further communication.
Kontra is better suited to medium and large enterprises with some AppSec foundation that want to scale developer security capability-building. It is also suitable for organizations in finance, technology, government, and other sectors with requirements around secure development processes. Accessibility and payment availability from mainland China are unknown. The page’s country list includes China, but that does not necessarily indicate mature localized service. If Chinese-language training, local invoicing, or MLPS/compliance support is required, domestic security vendor training solutions may be worth evaluating as well. International alternatives include Secure Code Warrior, Checkmarx Codebashing, PortSwigger Web Security Academy, and others.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on application.security official site.
application.security is an Unknown Security provider. TG4G tracks its product information, an overall rating of 8.0/10, and a China-accessibility score of Workable. Click "Visit Official Site" to reach application.security directly.