Waratek IAST

7.8easy start · #2 of 15
in Interactive Application Security Testing Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you workyes

Runs on Linux, self-hosted, Web, Windows. Paid plans from $2,499/mo.

Waratek IAST is ranked #2 of 15 in interactive application security testing software on The Geeks Club. It runs on Linux, Self-hosted, Web, Windows. There is no free plan. A free trial is offered. Paid plans start at $2,499/mo.

Waratek IAST plans and pricing

All plans

Starter Free Free trial · can be converted to a purchase order 1 application per organization · full IAST runtime analysis · basic CI/CD integration · standard vulnerability reporting · email and knowledge base support waratek.com · 3 Oct 2026

Team $2,499/mo $2,499/ month 3 applications included, scale up to 5 · +$833/mo per additional app (up to 2) · team collaboration · Jira & Slack integrations (Coming Soon) · SSO / SAML · support with 48-hour max response waratek.com · 3 Oct 2026

Enterprise Not published Custom Custom / unlimited applications · advanced CI/CD plugins, custom rulesets, and software composition analysis marked Coming Soon · dedicated success manager · priority support and custom onboarding with same-business-day max response waratek.com · 3 Oct 2026

Compared on interactive application security testing software

Free plan: No
Paid from: $2,499/mo
Deployment: hybrid
Instrumentation: agent
CI/CD integration: Yes
Language coverage: Java

Best Waratek IAST alternatives

See all 14

HCL AppScan 0 of 4 in the starter kit Lesson 17.9 Aikido CSPM 0 of 4 in the starter kit Lesson 37.4 Veracode DAST 0 of 4 in the starter kit Lesson 47.3 DongTai IAST 0 of 4 in the starter kit Lesson 57.2 New Relic IAST 0 of 4 in the starter kit Lesson 67.1 Acunetix 0 of 4 in the starter kit Lesson 76.9

The record

Purpose: Waratek IAST monitors application behavior during execution to find vulnerabilities in running code.
Runtime analysis: The product observes data flow and execution paths in real time using runtime instrumentation inside the application.
Feedback: Vulnerability findings include the exact line of code, full stack trace, and the data flow that led to the issue.
Source code: Waratek says IAST analyzes compiled bytecode or binaries and does not require source code access.
Testing workflow: IAST generates security insights while QA teams or automated suites run their standard functional tests, without a separate security scan phase.
Accuracy claim: Waratek reports a 100% true positive rate, 0% false positive rate, and OWASP Benchmark score of 100.
Integrations: The Team plan lists Jira and Slack integrations, marked Coming Soon, and the Starter plan includes basic CI/CD integration.
Security controls: The Team plan lists SSO / SAML.
Support: Starter includes email and knowledge base support; Team includes email, chat, and knowledge base support with a 48-hour maximum response.
Enterprise features: Enterprise lists custom rulesets, advanced CI/CD plugins, and software composition analysis as Coming Soon.
Who it is for: Waratek positions Starter for software and security engineers, Team for growing engineering and QA teams, and Enterprise for mid-market to large enterprises.
Platform scope: Waratek describes its application security platform as being for Java applications.
Company background: Waratek says the company launched in 2018 and lists its Dublin address in Ireland.
Founded: 2018
Price from: $2,499/mo

Where it ranks on The Geeks Club

Best Interactive Application Security Testing Software in 2026#2 of 15

Is Waratek IAST yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Waratek IAST

Sources

waratek.com/iast/· checked 3 Oct 2026
waratek.com/faqs/· checked 3 Oct 2026
waratek.com/pricing/· checked 3 Oct 2026
docs.waratek.com· checked 3 Oct 2026
waratek.com/about/· checked 3 Oct 2026