Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Head-to-head · Interactive Application Security Testing Software

Datadog Runtime Code Analysis (IAST) vs Waratek IAST

  • Updated Oct 2026
  • Both researched from official sources
  • 2 checks side by side

Datadog Runtime Code Analysis (IAST) leads on 0 checks, Waratek IAST on 0, and 2 are even. Who comes out ahead on the 2 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreDatadog Runtime Code Analysis (IAST) · 9.1/10
  • Free trialonly Datadog Runtime Code Analysis (IAST)

Datadog Runtime Code Analysis (IAST) scores higher on our rubric for interactive application security testing software: 9.1 against 8.2 out of 10; our editors rank them #2 and #8.

On deployment, Waratek IAST gives you Hybrid where Datadog Runtime Code Analysis (IAST) offers Saas.

Datadog Runtime Code Analysis (IAST) is the better fit for datadog customers needing priced IAST. Waratek IAST is the better fit for java teams needing self-hosted IAST.

  • Datadog Runtime Code Analysis (IAST) fits best

    Datadog customers needing priced IAST

  • Waratek IAST fits best

    Java teams needing self-hosted IAST

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Datadog Runtime Code Analysis (IAST) 9.1/10 Visit ↗ Waratek IAST 8.2/10 Visit ↗
At a glance
Editor score 9.1 8.2
Ranking #2 in Interactive Application Security Testing Software #8 in Interactive Application Security Testing Software
Best for Datadog customers needing priced IAST Java teams needing self-hosted IAST
Pricing model Paid Paid
Starting price $20/unit/mo —
Free plan — —
Free trial 14 days —
Deployment Cloud Cloud, Self-hosted
Platforms Web Web, Linux, Windows
Support Email, Phone, Docs Email, Live chat, Docs
Integrations 3 integrations 4 integrations
Built for Mid-market, Enterprise Small business, Mid-market, Enterprise
Features Datadog Runtime Code Analysis (IAST) 1/3 · Waratek IAST 1/3
Authenticated testing Not checked yet Not checked yet
API testing Not checked yet Not checked yet
CI/CD integration ✓ ✓
Specs
Runtime targets Web Not checked yet
Deployment Saas Hybrid
Instrumentation Agent Agent
Language coverage Java, .NET, Node.js, Python Java
Our review
Pros
  • Confirmed vulnerability detection helps reduce false positives
  • Runtime context prioritizes severity and remediation
  • Code, service, file, method, and line details aid investigation
  • Runtime analysis with execution paths, stack traces, and remediation guidance
  • Agent instrumentation supports deployment without source-code changes
  • CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support
Cons
  • Available only to Datadog APM customers
  • Coverage is limited to web applications
  • Requires the Datadog Agent and supported SDK or tracing library
  • Java-only coverage limits language and application breadth
  • Team pricing is $2,499 per month
  • Some Jira, Slack, and advanced CI/CD capabilities are coming soon
Our verdict

Datadog Runtime Code Analysis (IAST) monitors instrumented applications as they run and identifies confirmed vulnerabilities in first-party code. It follows user-controlled data through request URLs, bodies, and headers, then presents…

Read the review →

Waratek IAST analyzes Java applications during runtime and functional testing to identify exploitable vulnerabilities with code-level execution context. It is aimed at software engineers, security teams, QA teams, and organizations…

Read the review →
  1. Datadog Runtime Code Analysis (IAST)Interactive Application Security Testing Software 9.114-day trial
  2. Waratek IASTInteractive Application Security Testing Software 8.2Paid

Strengths and trade-offs

  • Datadog Runtime Code Analysis (IAST) — where it wins

    • Confirmed vulnerability detection helps reduce false positives
    • Runtime context prioritizes severity and remediation
    • Code, service, file, method, and line details aid investigation

    Where it doesn't

    • Available only to Datadog APM customers
    • Coverage is limited to web applications
    • Requires the Datadog Agent and supported SDK or tracing library
  • Waratek IAST — where it wins

    • Runtime analysis with execution paths, stack traces, and remediation guidance
    • Agent instrumentation supports deployment without source-code changes
    • CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support

    Where it doesn't

    • Java-only coverage limits language and application breadth
    • Team pricing is $2,499 per month
    • Some Jira, Slack, and advanced CI/CD capabilities are coming soon
  • Datadog Runtime Code Analysis (IAST)9.1/10 · 14-day trial

    Priced IAST for Datadog APM customers, with confirmed findings and code-level context.

    Visit DatadogFull verdict →
  • Waratek IAST8.2/10 · Paid

    A Java-focused, self-hosted IAST option with strong runtime context but limited breadth.

    Visit WaratekFull verdict →

More comparisons

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated · How we research and update