Ann Samuel

Articles

Recent activity by Ann Samuel

Sort by recent activity

Recent activity Votes

• Troubleshooting: No Data After Installing Flex Agent Directly

  OverviewYou've signed up for Contrast CVE Shield Free tier, installed the Flex Agent directly, and connected your first Java application, but it either doesn't show up in Northstar at all, or it sh...

  • Updated August 03, 2026 13:28
  • 0 followers
  • 0 comments
  • 0 votes

• How long does it take for a CVE Shield configuration change to take effect?

  Up to 5 minutes. After you change the default policy (Off, Monitor, or Block) for Development, QA, or Production, it can take up to 5 minutes for agents to pick up and apply the new setting. This a...

  • Updated August 02, 2026 16:35
  • 0 followers
  • 0 comments
  • 0 votes

• Do I need to install an agent to use CVE Shield?

  Yes. CVE Shield uses the Contrast Java agent, which installs once and then protects all covered CVEs automatically, with no code changes or restarts required after initial setup.See: Quickstart Gui...

  • Updated August 24, 2026 23:18
  • 0 followers
  • 0 comments
  • 0 votes

• What's the difference between observation mode and blocking?

  Observation or Monitor Mode, included on Free, shows real exploitation attempts against your running application, including the route, the CVE, the timestamp, and the source IP. Blocking or Block M...

  • Updated August 25, 2026 02:10
  • 0 followers
  • 0 comments
  • 0 votes

• Which languages does the free tier support?

  Contrast CVE Shield Free tier starts with Java only. Support is installed by direct download or Kubernetes container Helm Chart. See: Quickstart Guide: CVE Shield Free Tier Entry

  • Updated August 24, 2026 23:19
  • 0 followers
  • 0 comments
  • 0 votes

• I'm used to doing X in Contrast, why is it greyed out or missing on CVE Shield Free?

  CVE Shield Free tier is read-only outside of setup and monitoring, so several actions available elsewhere in Contrast aren't available here yet. You can view incidents, including details, evidence,...

  • Updated August 25, 2026 01:48
  • 0 followers
  • 0 comments
  • 0 votes

• What do Incident result values mean for CVE Shield Free?

  Exploited means an attack reached the vulnerable code and succeeded, with the app in Monitor mode. Exposed means an attack was detected at the perimeter only. Protected means an attack was detected...

  • Updated August 25, 2026 02:45
  • 0 followers
  • 0 comments
  • 0 votes

• What do the CVE Shield status values mean?

  Not seen means the CVE hasn't been detected in your application yet. Exposed means the CVE is present and the vulnerable code path is in use, but no attack has been detected. Exploited means an att...

  • Updated August 25, 2026 02:41
  • 0 followers
  • 0 comments
  • 0 votes

• Why does an incident say "Exploited" or "Blocked" when CVE Shield shows a different status for that CVE?

  Incidents and CVE Shield track different things. An incident's result describes a single attack event, and it can be Exploited, Suspicious, Blocked, or Probed. CVE Shield's status describes a CVE's...

  • Updated August 25, 2026 02:42
  • 0 followers
  • 0 comments
  • 0 votes

• If a vulnerable library is in my app but that code path never runs, will CVE Shield flag it?

  No, and that's expected. CVE Shield reports on code that actually executes, not everything sitting in your dependency tree. That's the difference between "reachable," meaning the library is present...

  • Updated July 30, 2026 20:25
  • 0 followers
  • 0 comments
  • 0 votes