Waratek IAST monitors Java application behavior as code runs to find vulnerabilities. Runtime instrumentation follows data flow and execution paths inside the application, and findings include the relevant code line, a full stack trace, and the flow that led to the issue. Waratek says the tool analyzes compiled bytecode or binaries without source code access. QA teams or automated suites can generate security insights during their normal functional tests, without a separate security scan phase. The platform is available through a Portal SaaS option or an on-prem Portal Dedicated deployment. Starter is a free trial for one application and includes runtime analysis, basic CI/CD integration, standard vulnerability reporting, and email and knowledge base support. Team costs $2,499 per month and includes three applications, with up to two additional apps at $833/mo per app. Jira and Slack integrations are marked Coming Soon. Enterprise has custom pricing; custom rulesets, advanced CI/CD plugins, and software composition analysis are also marked Coming Soon. Waratek reports a 100% true positive rate, 0% false positive rate, and OWASP Benchmark score of 100.
Who it is for
Waratek positions Starter for software and security engineers, Team for growing engineering and QA teams, and Enterprise for mid-market to large enterprises. It is for teams working with Java applications.
What is good
- Findings include code line, stack trace, and data flow
- Does not require source code access
- Insights arise during regular functional tests
- Starter includes basic CI/CD integration
What to know first
- Platform scope is Java applications
- Starter trial covers one application
- Team costs $2,499 per month
- Jira and Slack integrations are Coming Soon
Verdict
Waratek IAST is focused on runtime analysis for Java applications, with findings tied to code and execution flow. Review the trial scope, Team cost, and Coming Soon features when weighing its fit.
Waratek IAST plans and pricing
All plansCompared on interactive application security testing software
- Free plan
- No
- Paid from
- $2,499/mo
- Deployment
- hybrid
- Instrumentation
- agent
- CI/CD integration
- Yes
- Language coverage
- Java
