From Contrast’s threat researchers: Proof that Contrast detects zero-days. The Contrast agent doesn’t require signatures or extensive framework knowledge; it identifies vulnerabilities by monitoring how untrusted data flows through a live application. 

*** This is a Security Bloggers Network syndicated blog from AppSec Observer authored by Max Sours, Senior Software Engineer. Read the original post at: https://www.contrastsecurity.com/security-influencers/detecting-zero-day-vulnerabilities-without-signatures-contrast-security