Skip to content
SPECIFICTION
Get listed

New Relic IAST

newrelic.com

Free plan Web
Visit newrelic.com
Spec score 7.4 #9 of 14 in Interactive Application Security Testing Software

What it is

New Relic IAST probes running application code for vulnerabilities that could be exploited, helping DevOps and security teams address risk through the software development lifecycle. Dynamic assessment simulates attacks and can provide proof of exploit without code changes. New Relic APM agents deliver the capability, which can be enabled with a configuration setting change; supported languages are Go, Java, Node.js, and Ruby. Guided remediation can identify the code location, stack trace, HTTP trace, encountered URLs, exploit mechanism, and parameters involved. IAST is integrated with New Relic Vulnerability Management for ongoing discovery, fixing, and verification of high-risk vulnerabilities. Findings receive severity scores using CVSS version 3, with Low, Medium, High, and Critical ranges. The tool supports authenticated and API testing, CI/CD pipelines, and ticketing systems. A free New Relic plan is available, but IAST analysis is billed through an optional Compute Add On based on Compute Capacity Units consumed during analysis. Pricing for other plans is available on request.

Spec sheet

Purpose
New Relic IAST probes running code for exploitable vulnerabilities to help prevent cyberattacks and breaches.Read 30 Sep 2026 · docs.newrelic.com
Audience
IAST is intended for DevOps and security teams that need continuous application security testing across the software development lifecycle.Read 30 Sep 2026 · newrelic.com
Deployment
New Relic APM agents deliver IAST and it can be enabled through a configuration setting change.Read 30 Sep 2026 · docs.newrelic.com
Integrations
New Relic offers more than 780 integrations across applications, logs, and infrastructure data.Read 30 Sep 2026 · newrelic.com
Compliance
New Relic currently lists FedRAMP, HIPAA-enabled capabilities, ISO 27001, ISO 42001, PCI DSS, SOC 1, SOC 2, and TISAX certifications or attestations.Read 30 Sep 2026 · docs.newrelic.com
Headquarters
San Francisco, California, USARead 28 Sep 2026 · newrelic.com
Founded
2008Read 28 Sep 2026 · newrelic.com
Billing
IAST is billed through an optional Compute Add On based on Compute Capacity Units consumed during analysis.Read 30 Sep 2026 · docs.newrelic.com
CI/CD and ticketing
IAST supports seamless integration with CI/CD pipelines and ticketing systems.Read 30 Sep 2026 · newrelic.com
Data residency
Customers can choose between New Relic data centers in the United States and European Union.Read 30 Sep 2026 · newrelic.com
Exploit validation
Dynamic assessment simulates real-world attacks and provides proof of exploit without requiring code changes.Read 30 Sep 2026 · newrelic.com
False positives
IAST is designed to provide fewer false-positive findings than traditional application security tools.Read 30 Sep 2026 · docs.newrelic.com
Guided remediation
Guided remediation can identify code location, stack trace, HTTP trace, encountered URLs, exploit mechanism, and parameters.Read 30 Sep 2026 · newrelic.com
Severity scoring
IAST assigns vulnerability severity using CVSS version 3, with Low, Medium, High, and Critical ranges.Read 30 Sep 2026 · docs.newrelic.com
Supported languages
IAST is available through New Relic agents for Go, Java, Node.js, and Ruby.Read 30 Sep 2026 · docs.newrelic.com
Vulnerability management
IAST is fully integrated with New Relic Vulnerability Management for continuously finding, fixing, and verifying high-risk vulnerabilities across the software development lifecycle.Read 30 Sep 2026 · docs.newrelic.com

Plans and prices

Free Free 100 GB data ingest/month · 1 free full platform user · unlimited basic users · 50+ capabilities Read 30 Sep 2026 · newrelic.com
Enterprise Priced on request Unlimited full platform users · FedRAMP Moderate and HIPAA eligibility with Data Plus · priority ticket routing · 1-hour critical initial support response SLA Read 30 Sep 2026 · newrelic.com
Pro Priced on request Unlimited full platform users · 2-hour critical initial support response SLA · Data Plus eligibility Read 30 Sep 2026 · newrelic.com
Standard Priced on request Up to 5 full platform users · ticketed support · 2 business days support response SLA · SAML single sign-on Read 30 Sep 2026 · newrelic.com

Every New Relic IAST plan and price →

Strong points and limits

Strong points

  • Simulates attacks without code changes
  • Provides proof of exploit
  • Guided remediation identifies traces and parameters
  • Supports four listed languages
  • Integrates with CI/CD and ticketing systems

Limits

  • IAST analysis uses an optional paid Compute Add On
  • Supports only Go, Java, Node.js, and Ruby
  • Other plan pricing is available on request

Who it suits

It is intended for DevOps and security teams that need continuous application security testing. It suits teams using New Relic APM agents in Go, Java, Node.js, or Ruby environments.

Verdict

New Relic IAST combines runtime assessment with exploit evidence and remediation details for supported languages. A free New Relic plan is available, but IAST analysis is billed by Compute Capacity Units through an optional add-on.

Where Specifiction places it

Alternatives to New Relic IASTAll alternatives →