Datadog Runtime Code Analysis (IAST) review
Priced IAST for Datadog APM customers, with confirmed findings and code-level context.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Datadog Runtime Code Analysis (IAST) monitors instrumented applications as they run and identifies confirmed vulnerabilities in first-party code. It follows user-controlled data through request URLs, bodies, and headers, then presents findings with runtime, service, and source-code context. The product is aimed at DevOps and security teams operating Java, .NET, Node.js, or Python web services within Datadog’s SaaS platform.
Pricing is straightforward but depends on billing. The Runtime Code Analysis (IAST) plan costs $20 per host per month with annual billing, or $29 per host per month with monthly billing. The annual plan includes runtime vulnerability detection, observability-informed remediation prioritization, and code snippets with source locations. The monthly option is described as on-demand pricing for runtime code analysis. A 14-day free trial is available, while there is no free plan.
The strongest fit is for teams already using Datadog APM that want runtime evidence rather than findings without application context. Vulnerability Explorer organizes results by service, file, method, and line, while guided remediation steps and example code support follow-up work. Jira and CI/CD integrations connect findings with existing development workflows. Setup requires the Datadog Agent plus a supported SDK or tracing library, so teams must account for instrumentation across their services. Organizations outside Datadog APM, or those needing coverage beyond web applications and the supported language set, should consider a different IAST product.
Datadog Runtime Code Analysis (IAST) pros and cons
- Where it wins
- Confirmed vulnerability detection helps reduce false positives
- Runtime context prioritizes severity and remediation
- Code, service, file, method, and line details aid investigation
- Where it doesn't
- Available only to Datadog APM customers
- Coverage is limited to web applications
- Requires the Datadog Agent and supported SDK or tracing library
Datadog Runtime Code Analysis (IAST) fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update