Tech riderRev. 3 Oct 2026

Waratek IAST

Ch 027.7of 15 Interactive Application Security Testing Software

1Runs onLinux, self-hosted, Web, Windows
2Costsfree trial · paid from $2,499/mo
3Deploymenthybrid
4Instrumentationagent
5CI/CD integrationYes
6Language coverageJava

6 lines stated Written from the maker's own pages: waratek.com

Visit site Alternatives

Overview

Waratek IAST is ranked #2 of 15 in interactive application security testing software on Specifiction. It runs on Linux, Self-hosted, Web, Windows. There is no free plan. A free trial is offered. Paid plans start at $2,499/mo.

Waratek IAST plans and pricing

All plans

Starter Free Free trial · can be converted to a purchase order 1 application per organization · full IAST runtime analysis · basic CI/CD integration · standard vulnerability reporting · email and knowledge base support waratek.com · 3 Oct 2026

Team $2,499/mo $2,499/ month 3 applications included, scale up to 5 · +$833/mo per additional app (up to 2) · team collaboration · Jira & Slack integrations (Coming Soon) · SSO / SAML · support with 48-hour max response waratek.com · 3 Oct 2026

Enterprise Not published Custom Custom / unlimited applications · advanced CI/CD plugins, custom rulesets, and software composition analysis marked Coming Soon · dedicated success manager · priority support and custom onboarding with same-business-day max response waratek.com · 3 Oct 2026

Compared on interactive application security testing software

Free plan: Nowaratek.com
Paid from: $2,499/mowaratek.com
Deployment: hybridwaratek.com
Instrumentation: agentwaratek.com
CI/CD integration: Yeswaratek.com
Language coverage: Javawaratek.com

Facts

Purpose: Waratek IAST monitors application behavior during execution to find vulnerabilities in running code.waratek.com · 3 Oct 2026
Runtime analysis: The product observes data flow and execution paths in real time using runtime instrumentation inside the application.waratek.com · 3 Oct 2026
Feedback: Vulnerability findings include the exact line of code, full stack trace, and the data flow that led to the issue.waratek.com · 3 Oct 2026
Source code: Waratek says IAST analyzes compiled bytecode or binaries and does not require source code access.waratek.com · 3 Oct 2026
Testing workflow: IAST generates security insights while QA teams or automated suites run their standard functional tests, without a separate security scan phase.waratek.com · 3 Oct 2026
Accuracy claim: Waratek reports a 100% true positive rate, 0% false positive rate, and OWASP Benchmark score of 100.waratek.com · 3 Oct 2026
Integrations: The Team plan lists Jira and Slack integrations, marked Coming Soon, and the Starter plan includes basic CI/CD integration.waratek.com · 3 Oct 2026
Security controls: The Team plan lists SSO / SAML.waratek.com · 3 Oct 2026
Support: Starter includes email and knowledge base support; Team includes email, chat, and knowledge base support with a 48-hour maximum response.waratek.com · 3 Oct 2026
Enterprise features: Enterprise lists custom rulesets, advanced CI/CD plugins, and software composition analysis as Coming Soon.waratek.com · 3 Oct 2026
Who it is for: Waratek positions Starter for software and security engineers, Team for growing engineering and QA teams, and Enterprise for mid-market to large enterprises.waratek.com · 3 Oct 2026
Platform scope: Waratek describes its application security platform as being for Java applications.docs.waratek.com · 3 Oct 2026
Company background: Waratek says the company launched in 2018 and lists its Dublin address in Ireland.waratek.com · 3 Oct 2026