New Relic IAST
New Relic IAST: Focused web IAST with exploit validation, remediation context, and CI/CD integration. Ranked #1 of 15 in Interactive Application Security Testing Software by our editors (9.3/10); pricing: Pricing on request; best for teams wanting validated web IAST findings.
At a glance
- Editor score9.3 / 10
- PricingPricing on request
- Best forTeams wanting validated web IAST findings
- Free planNo
- Runtime targetsWeb
- Founded2008 · San Francisco, California, USA
- Facts checked20 Sep 2026
Where it wins
- Validates exploitable vulnerabilities with attack simulations and proof-of-exploit context
- Adds CVSSv3 scoring, stack-trace context, and guided remediation details
- Supports API testing, coverage analysis, and CI/CD integration
Where it doesn't
- Targets web applications rather than broader runtime environments
- IAST runs only in non-production environments
- Billed through Compute Capacity Units via an optional Compute Add On
Our verdict on New Relic IAST
New Relic IAST is an interactive application security testing capability within the New Relic observability platform. It is designed for DevOps, engineering, and security teams that need to assess running web applications in non-production environments. Using New Relic APM agents, it analyzes APIs, method calls, and traces while simulating attacks to identify vulnerabilities that can be exploited. Its focus is validated findings rather than static issue lists, with proof-of-exploit context helping teams distinguish actionable risks.
The feature set centers on application insight and remediation. Runtime analysis is paired with CVSSv3 severity scoring, code-location details, and stack-trace context, giving developers information for investigating and fixing findings. Coverage analysis spans APIs, methods, and traces, while authentication testing, API testing, scan scheduling, and duration controls support different assessment workflows. Teams can also exclude selected APIs or parameters, which helps shape testing around the application under review.
New Relic IAST fits organizations already using New Relic APM agents and wanting security checks connected to existing delivery processes. It supports CI/CD pipelines and ticketing systems, making findings easier to route into development workflows. IAST is billed through New Relic’s optional Compute Add On, with usage calculated in Compute Capacity Units, rather than presented as a standalone IAST price. The capability is web-focused and should be run only in non-production environments, so teams seeking broader runtime targets or production testing should choose an alternative. For teams prioritizing validated web findings, remediation context, and observability-platform alignment, it is a focused option.
Your product? Our editors can test New Relic IAST in depth and publish a review, labelled as paid · from $149/mo →
New Relic IAST pricing
New Relic IAST fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Runtime targets | Web |
| Deployment | Saas |
| Authenticated testing | Yes |
| API testing | Yes |
| Instrumentation | Agent |
| CI/CD integration | Yes |
| Language coverage | Go, Java, Node.js, Ruby |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, SSO/SAML |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 780+ integrations: CI/CD pipelines, ticketing systems, New Relic APM agents See all → |
| Pricing | Pricing on request (source) |
| Website | newrelic.com |
| Facts checked | 20 Sep 2026 |
New Relic IAST integrations
New Relic IAST lists 780+ integrations on its own site — the 3 named here are the ones its pages call out.
- CI/CD pipelines
- ticketing systems
- New Relic APM agents
See all New Relic IAST integrations →
Alternatives to New Relic IAST
- Datadog Runtime Code Analysis (IAST)Priced IAST for Datadog APM customers, with confirmed findings and code-level context.9.1
- HCL AppScanBroad AppSec coverage with IAST, free access, and integrations across development workflows.9.0
- Black Duck SeekerA broad, agent-based IAST platform for enterprise application and API security.8.8
See all New Relic IAST alternatives →
New Relic IAST vs the competition
- New Relic IAST vs Datadog Runtime Code Analysis (IAST)
- New Relic IAST vs HCL AppScan
- New Relic IAST vs Black Duck Seeker
- New Relic IAST vs Contrast Assess
- New Relic IAST vs Acunetix
- New Relic IAST vs OpenText Fortify on Demand
Compare New Relic IAST with any tool side by side →
Used New Relic IAST? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used New Relic IAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
New Relic IAST is listed in our Interactive Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/new-relic-iast/"><img src="https://www.itechguides.com/best/badge/new-relic-iast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update