Skip to content
SPECIFICTION
Get listed

Interactive Application Security Testing Software

Alternatives to Datadog Runtime Code Analysis (IAST)

The tools Specifiction weighs against Datadog Runtime Code Analysis (IAST), from its list of interactive application security testing software, each with its plans, platforms and spec score.

  1. 01 Aikido CSPM

    It suits teams managing cloud assets across multiple providers that want misconfiguration checks, identity risk analysis, and compliance reporting.

    From $300/mo Free plan Web · Windows · macOS · Linux
    9.4 Visit Specs
  2. 02 HCL AppScan

    AppScan Standard is aimed at security experts and penetration testers assessing web applications and APIs.

    Free plan Web · Windows · macOS · Linux
    8.9 Visit Specs
  3. 03 Acunetix

    It is aimed at small and mid-size organizations managing web application and API security.

    Free trial Web · Windows · Linux · API
    8.8 Visit Specs
  4. 04 DongTai IAST

    DongTai IAST suits developers and security teams looking for passive vulnerability detection in application test traffic, including teams using DevSecOps workflows.

    Free plan Web · Linux · API · Self-hosted
    8.4 Visit Specs
  5. 05 Waratek IAST

    Starter is positioned for software and security engineers; Team is for growing engineering and QA teams.

    From $2,499/mo Free plan Web · Windows · Linux · Self-hosted
    7.9 Visit Specs
  6. 06 Black Duck Polaris

    Polaris suits software teams seeking combined application-security scanning, compliance reporting, and repository or issue-tracker integrations.

    Free trial Web · API
    7.8 Visit Specs
  7. 07 Contrast Assess

    Assess suits developers and AppSec teams seeking continuous security feedback in IDE, test, and QA environments.

    Web · Windows · macOS · Linux
    7.8 Visit Specs
  8. 08 Invicti

    Invicti suits organizations managing application security across code, dependencies, infrastructure, APIs, secrets, and containers.

    Web · API · Self-hosted
    7.4 Visit Specs
  9. 09 New Relic IAST

    It is intended for DevOps and security teams that need continuous application security testing.

    Free plan Web
    7.4 Visit Specs
  10. 10 NowSecure Platform

    The product page identifies mobile security engineers, AppSec leaders, CISOs, privacy teams, and auditors as intended users.

    Web · iOS · Android · API
    7.0 Visit Specs
  11. 11 Black Duck Seeker

    It suits software teams securing web applications and APIs in Java, .NET, Node.js, Go, Python, or PHP.

    Web · Windows · macOS · Linux
    6.2 Visit Specs
  12. 12 Checkmarx One

    It suits development and security teams that want source-code checks integrated with CI/CD, pull requests, and IDE workflows.

    Web
    5.8 Visit Specs
  13. 13 OpenText Fortify on Demand

    Fortify on Demand suits organizations seeking SaaS security testing for web applications and APIs, especially teams using authenticated assessments and CI/CD workflows.

    Web
    5.3 Visit Specs

Datadog Runtime Code Analysis (IAST), head to head