Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Alternatives to Waratek IAST
Waratek IAST monitors Java applications during execution, using an agent to trace runtime data flow and execution paths. It can analyze compiled bytecode or binaries without source access, and its findings include the vulnerable code line, full stack trace, and path that led to the issue. Teams can use those insights during normal QA or automated functional tests instead of a separate security scan phase. Starter offers a free trial for one application, while Team costs…
HCL AppScan identifies and prioritizes software vulnerabilities, and helps teams remediate them across the development lifecycle.
Acunetix, now Invicti Web + API, scans running web applications and APIs for exploitable vulnerabilities.
- 4
DongTai IAST
DongTai IAST is an open-source interactive application security testing tool for analyzing application traffic and detecting vulnerabilities in Java…
Free planWebAPILinuxSelf-hosted6.5Free plan - 5

Contrast Assess
Contrast Assess is an Interactive Application Security Testing tool for identifying security risks in running applications.
WebAPILinuxmacOS6.3 - 6

Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 7

New Relic IAST
New Relic IAST probes running application code to identify vulnerabilities that could be exploited, helping DevOps and security teams address risk…
Free planWeb6.2Free plan - 8

NowSecure Platform
NowSecure Platform gives organizations visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps they build, use, or manage.
AndroidiOSWebAPI6.0 - 9

Black Duck Polaris
Black Duck Polaris is a cloud-native application security testing platform that brings security analysis together across the software development life cycle.
WebAPI5.8 - 105.3From $20 a month
- 11

Black Duck Seeker
WebLinuxmacOSWindows5.0 - 12

Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 134.8


