Waratek IAST
Waratek IAST: A Java-focused, self-hosted IAST option with strong runtime context but limited breadth. Ranked #8 of 15 in Interactive Application Security Testing Software by our editors (8.2/10); pricing: Paid; best for java teams needing self-hosted IAST.
At a glance
- Editor score8.2 / 10
- PricingPaid
- Best forJava teams needing self-hosted IAST
- Free planNo
- Founded2018 · Dublin, Ireland
- Facts checked20 Sep 2026
Where it wins
- Runtime analysis with execution paths, stack traces, and remediation guidance
- Agent instrumentation supports deployment without source-code changes
- CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support
Where it doesn't
- Java-only coverage limits language and application breadth
- Team pricing is $2,499 per month
- Some Jira, Slack, and advanced CI/CD capabilities are coming soon
Our verdict on Waratek IAST
Waratek IAST analyzes Java applications during runtime and functional testing to identify exploitable vulnerabilities with code-level execution context. It is aimed at software engineers, security teams, QA teams, and organizations securing AI-generated Java code. The product uses agent-based instrumentation inside the application runtime and supports compile-time or runtime deployment without source-code changes. Its hybrid deployment model includes web, Linux, Windows, and self-hosted environments.
The published plans show a tiered offering. Starter includes full IAST runtime analysis, basic CI/CD integration, standard vulnerability reporting, and email and knowledge base support. Team costs $2,499 per month and adds team collaboration, Jira and Slack integrations, SSO/SAML, plus email, chat, and knowledge base support. Enterprise includes custom or unlimited applications, advanced CI/CD plugins, custom rulesets, software composition analysis, a dedicated success manager, priority support, and custom onboarding. The product also connects with functional testing tools such as JUnit and Selenium, while OWASP Benchmark reporting adds a defined assessment format.
Waratek IAST’s main strength is depth around runtime findings: execution-path context, stack traces, vulnerability reporting, and remediation guidance can help teams move from detection toward code-level investigation. Its main constraint is scope. Java-only coverage makes it a focused choice rather than a broad application security platform, and the $2,499 monthly Team tier may narrow its fit for smaller teams. Jira, Slack, and some advanced CI/CD capabilities are marked as coming soon, which matters for teams prioritizing immediately available workflow automation. Choose it for Java teams that want self-hosted IAST and runtime context; consider an alternative when multi-language coverage or broader ecosystem availability is essential.
Your product? Our editors can test Waratek IAST in depth and publish a review, labelled as paid · from $149/mo →
Waratek IAST pricing
All 3 Waratek IAST plans and prices →
Waratek IAST fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Runtime targets | Not verified |
| Deployment | Hybrid |
| Authenticated testing | Not verified |
| API testing | Not verified |
| Instrumentation | Agent |
| CI/CD integration | Yes |
| Language coverage | Java |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Linux, Windows |
| Compliance & security | GDPR, HIPAA, PCI DSS, SSO/SAML |
| Support | Email, Live chat, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: Jira, Slack, JUnit, Selenium |
| Pricing | Paid (source) |
| Website | waratek.com |
| Facts checked | 20 Sep 2026 |
Waratek IAST integrations
Waratek IAST lists 4 integrations on its own site.
- Jira
- Slack
- JUnit
- Selenium
Alternatives to Waratek IAST
- New Relic IASTFocused web IAST with exploit validation, remediation context, and CI/CD integration.9.3
- Datadog Runtime Code Analysis (IAST)Priced IAST for Datadog APM customers, with confirmed findings and code-level context.9.1
- HCL AppScanBroad AppSec coverage with IAST, free access, and integrations across development workflows.9.0
See all Waratek IAST alternatives →
Waratek IAST vs the competition
- Waratek IAST vs New Relic IAST
- Waratek IAST vs Datadog Runtime Code Analysis (IAST)
- Waratek IAST vs HCL AppScan
- Waratek IAST vs Black Duck Seeker
- Waratek IAST vs Contrast Assess
- Waratek IAST vs Acunetix
Compare Waratek IAST with any tool side by side →
Used Waratek IAST? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Waratek IAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Waratek IAST is listed in our Interactive Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/waratek-iast/"><img src="https://www.itechguides.com/best/badge/waratek-iast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update