New Relic IAST vs Waratek IAST

New Relic IAST9.3Visit Waratek IAST8.2Visit

Higher score New Relic IAST #1 in Interactive Application Security Testing Software 9.3/10 Pricing on request ✓ 3 of 3 features Visit New Relic

vs

Waratek IAST #8 in Interactive Application Security Testing Software 8.2/10 Paid ✓ 1 of 3 features Visit Waratek

• New Relic IAST fits best

  Teams wanting validated web IAST findings

• Waratek IAST fits best

  Java teams needing self-hosted IAST

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	New Relic IAST 9.3/10 Visit ↗	Waratek IAST 8.2/10 Visit ↗
At a glance
Editor score	9.3	8.2
Ranking	#1 in Interactive Application Security Testing Software	#8 in Interactive Application Security Testing Software
Best for	Teams wanting validated web IAST findings	Java teams needing self-hosted IAST
Pricing model	Paid	Paid
Starting price	Pricing on request	—
Free plan	—	—
Free trial	—	—
Deployment	Cloud	Cloud, Self-hosted
Platforms	Web	Web, Linux, Windows
Support	Community, Docs	Email, Live chat, Docs
Compliance	SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, SSO/SAML	GDPR, HIPAA, PCI DSS, SSO/SAML
Integrations	780+ integrations	4 integrations
Built for	Small business, Mid-market, Enterprise	Small business, Mid-market, Enterprise
Features New Relic IAST 3/3 · Waratek IAST 1/3
Authenticated testing	✓ (best)	Not checked yet
API testing	✓ (best)	Not checked yet
CI/CD integration	✓	✓
Specs
Runtime targets	Web	Not checked yet
Deployment	Saas	Hybrid
Instrumentation	Agent	Agent
Language coverage	Go, Java, Node.js, Ruby	Java
Our review
Pros	Validates exploitable vulnerabilities with attack simulations and proof-of-exploit context Adds CVSSv3 scoring, stack-trace context, and guided remediation details Supports API testing, coverage analysis, and CI/CD integration	Runtime analysis with execution paths, stack traces, and remediation guidance Agent instrumentation supports deployment without source-code changes CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support
Cons	Targets web applications rather than broader runtime environments IAST runs only in non-production environments Billed through Compute Capacity Units via an optional Compute Add On	Java-only coverage limits language and application breadth Team pricing is $2,499 per month Some Jira, Slack, and advanced CI/CD capabilities are coming soon
Our verdict	New Relic IAST is an interactive application security testing capability within the New Relic observability platform. It is designed for DevOps, engineering, and security teams that need to assess running web applications in non-production… Read the review →	Waratek IAST analyzes Java applications during runtime and functional testing to identify exploitable vulnerabilities with code-level execution context. It is aimed at software engineers, security teams, QA teams, and organizations… Read the review →

Strengths and trade-offs

• New Relic IAST — where it wins

  • Validates exploitable vulnerabilities with attack simulations and proof-of-exploit context
  • Adds CVSSv3 scoring, stack-trace context, and guided remediation details
  • Supports API testing, coverage analysis, and CI/CD integration

  Where it doesn't

  • Targets web applications rather than broader runtime environments
  • IAST runs only in non-production environments
  • Billed through Compute Capacity Units via an optional Compute Add On

• Waratek IAST — where it wins

  • Runtime analysis with execution paths, stack traces, and remediation guidance
  • Agent instrumentation supports deployment without source-code changes
  • CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support

  Where it doesn't

  • Java-only coverage limits language and application breadth
  • Team pricing is $2,499 per month
  • Some Jira, Slack, and advanced CI/CD capabilities are coming soon

• New Relic IAST9.3/10 · Pricing on request

  Focused web IAST with exploit validation, remediation context, and CI/CD integration.

  Visit New RelicFull verdict →
• Waratek IAST8.2/10 · Paid

  A Java-focused, self-hosted IAST option with strong runtime context but limited breadth.

  Visit WaratekFull verdict →