Obsidian Security vs Contrast Security
Side-by-side comparison of AI visibility scores, market position, and capabilities
SaaS security platform for behavioral threat detection and identity risk management across enterprise SaaS applications. Newport Beach CA; raised $90M+;
About
Obsidian Security is a SaaS security and identity threat detection company founded in 2017 and headquartered in Newport Beach, California. The company was founded by former executives and engineers from Carbon Black, CrowdStrike, and the NSA who applied endpoint detection and response principles to the SaaS domain. Obsidian's platform monitors user behavior across SaaS applications to detect account compromise, insider threats, and data exfiltration by analyzing activity patterns — logins, API calls, data access, sharing events — against behavioral baselines built for each user.\n\nObsidian raised $90 million across three rounds from investors including Norwest Venture Partners, IVP, and Greylock Partners. Its platform integrates with major enterprise SaaS applications including Salesforce, Microsoft 365, Google Workspace, ServiceNow, GitHub, Workday, and more than 40 other applications. Rather than relying solely on configuration checks, Obsidian focuses on runtime behavioral analytics: detecting when a compromised account is performing unusual data exports, when a user accesses records far outside their normal work patterns, or when a service account begins making API calls it has never made before.\n\nThe platform also covers SaaS identity risk management, inventorying privileged accounts, dormant accounts, and over-permissioned users across all integrated applications. Security teams can use Obsidian to reduce their SaaS attack surface by identifying and remediating excessive access, and to respond to active threats with detailed activity timelines that provide forensic evidence for incident investigations. Obsidian's combination of posture management and behavioral detection positions it between pure SSPM tools and identity threat detection and response (ITDR) platforms.
Contrast Security embeds security instrumentation directly into application code to enable real-time vulnerability detection and attack prevention throughout the software development lifecycle.
About
Contrast Security is a Los Altos-based application security company founded in 2014 by Arshan Dabirsiaghi and Jeff Williams that pioneered Instrumentation-based Application Security Testing (IAST) and Runtime Application Self-Protection (RASP). Unlike traditional SAST or DAST scanners that analyze code or simulate attacks externally, Contrast embeds lightweight agents directly into running applications to observe behavior in real time — catching vulnerabilities and blocking attacks with near-zero false positives.
AI Visibility Head-to-Head
Key Details
Capabilities & Ecosystem
Capabilities
Integrations
Also Compare
Track AI Visibility in Real Time
Monitor how your brand performs across ChatGPT, Gemini, Perplexity, Claude, and Grok daily.