New Relic IAST vs Datadog Runtime Code Analysis (IAST)

New Relic IAST9.3Visit Datadog Runtime Code Analysis (IAST)9.1Visit

Higher score New Relic IAST #1 in Interactive Application Security Testing Software 9.3/10 Pricing on request ✓ 3 of 3 features Visit New Relic

vs

Datadog Runtime Code Analysis (IAST) #2 in Interactive Application Security Testing Software 9.1/10 14-day trial Free trial✓ 1 of 3 features Visit Datadog

• New Relic IAST fits best

  Teams wanting validated web IAST findings

• Datadog Runtime Code Analysis (IAST) fits best

  Datadog customers needing priced IAST

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	New Relic IAST 9.3/10 Visit ↗	Datadog Runtime Code Analysis (IAST) 9.1/10 Visit ↗
At a glance
Editor score	9.3	9.1
Ranking	#1 in Interactive Application Security Testing Software	#2 in Interactive Application Security Testing Software
Best for	Teams wanting validated web IAST findings	Datadog customers needing priced IAST
Pricing model	Paid	Paid
Starting price	Pricing on request	$20/unit/mo
Free plan	—	—
Free trial	—	14 days
Deployment	Cloud	Cloud
Platforms	Web	Web
Support	Community, Docs	Email, Phone, Docs
Integrations	780+ integrations	3 integrations
Built for	Small business, Mid-market, Enterprise	Mid-market, Enterprise
Features New Relic IAST 3/3 · Datadog Runtime Code Analysis (IAST) 1/3
Authenticated testing	✓ (best)	Not checked yet
API testing	✓ (best)	Not checked yet
CI/CD integration	✓	✓
Specs
Runtime targets	Web	Web
Deployment	Saas	Saas
Instrumentation	Agent	Agent
Language coverage	Go, Java, Node.js, Ruby	Java, .NET, Node.js, Python
Our review
Pros	Validates exploitable vulnerabilities with attack simulations and proof-of-exploit context Adds CVSSv3 scoring, stack-trace context, and guided remediation details Supports API testing, coverage analysis, and CI/CD integration	Confirmed vulnerability detection helps reduce false positives Runtime context prioritizes severity and remediation Code, service, file, method, and line details aid investigation
Cons	Targets web applications rather than broader runtime environments IAST runs only in non-production environments Billed through Compute Capacity Units via an optional Compute Add On	Available only to Datadog APM customers Coverage is limited to web applications Requires the Datadog Agent and supported SDK or tracing library
Our verdict	New Relic IAST is an interactive application security testing capability within the New Relic observability platform. It is designed for DevOps, engineering, and security teams that need to assess running web applications in non-production… Read the review →	Datadog Runtime Code Analysis (IAST) monitors instrumented applications as they run and identifies confirmed vulnerabilities in first-party code. It follows user-controlled data through request URLs, bodies, and headers, then presents… Read the review →

Strengths and trade-offs

• New Relic IAST — where it wins

  • Validates exploitable vulnerabilities with attack simulations and proof-of-exploit context
  • Adds CVSSv3 scoring, stack-trace context, and guided remediation details
  • Supports API testing, coverage analysis, and CI/CD integration

  Where it doesn't

  • Targets web applications rather than broader runtime environments
  • IAST runs only in non-production environments
  • Billed through Compute Capacity Units via an optional Compute Add On

• Datadog Runtime Code Analysis (IAST) — where it wins

  • Confirmed vulnerability detection helps reduce false positives
  • Runtime context prioritizes severity and remediation
  • Code, service, file, method, and line details aid investigation

  Where it doesn't

  • Available only to Datadog APM customers
  • Coverage is limited to web applications
  • Requires the Datadog Agent and supported SDK or tracing library

• New Relic IAST9.3/10 · Pricing on request

  Focused web IAST with exploit validation, remediation context, and CI/CD integration.

  Visit New RelicFull verdict →
• Datadog Runtime Code Analysis (IAST)9.1/10 · 14-day trial

  Priced IAST for Datadog APM customers, with confirmed findings and code-level context.

  Visit DatadogFull verdict →