Best Interactive Application Security Testing Software in 2026
Updated
In short: Aikido CSPM is ranked #1 of 14 as of 4 October 2026, ahead of HCL AppScan and Waratek IAST. The best-ranked option with a free plan is HCL AppScan. The lowest first paid tier on this page is Aikido CSPM at $300/mo.
Interactive application security testing software is used to assess applications as they run, with options here spanning different approaches and capabilities. The 2026 ranking compares API and authenticated testing, CI/CD integration, instrumentation, language coverage, and runtime targets. Deployment models and free plans, along with starting paid prices, provide further points of comparison. Aikido CSPM and HCL AppScan lead the entries shown, followed by New Relic IAST and DongTai IAST; Contrast Assess, Veracode DAST, NowSecure Platform, and Waratek IAST also appear. Consider which testing capabilities, runtime targets, and integration details match the applications and development workflow you need to cover.
14 interactive application security testing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
#1 Aikido CSPM Top pick · 7.3 Free plan · $300/mo
#2 HCL AppScan Runner-up · 7.3 Free plan · Free
#3 Waratek IAST Also great · 7.2 $2,499/mo
- Free plan apiLinuxmacOSWebWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms$300/mofirst paid tier About Aikido CSPMVisit site - Free planFree trial apiextensionLinuxmacOSself-hostedWebWindows
- Free plan
- Yes
- Runtime targets
- all
- Deployment
- hybrid
- Authenticated testing
- Yes
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Free trial Linuxself-hostedWebWindows
- Free plan
- No
- Paid from
- 2,499 /mo
- Deployment
- hybrid
RecognisedDocumentedFree planPlatforms$2,499/mofirst paid tier About Waratek IASTVisit site - Free plan apiLinuxself-hostedWeb
- Runtime targets
- web
- Deployment
- hybrid
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Free plan Web
- Free plan
- No
- Runtime targets
- web
- Deployment
- saas
- Authenticated testing
- Yes
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - apiLinuxmacOSself-hostedWebWindows
- Deployment
- hybrid
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiLinuxmacOSWebWindows
- Free plan
- No
- Deployment
- saas
RecognisedDocumentedFree planPlatforms - AndroidapiiOSWeb
- Runtime targets
- mobile
- Deployment
- saas
- Authenticated testing
- Yes
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiLinuxself-hostedWebWindows
- Deployment
- hybrid
- Authenticated testing
- Yes
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiWebRecognisedDocumentedFree planPlatforms
- LinuxmacOSWebWindows
- Runtime targets
- web
- Deployment
- self-hosted
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - apiself-hostedWeb
- Free plan
- No
RecognisedDocumentedFree planPlatforms - apiself-hostedWeb
- Free plan
- No
- API testing
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Runtime targets
- web
- Deployment
- saas
- Authenticated testing
- Yes
- API testing
- Yes
RecognisedDocumentedFree planPlatforms
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which interactive application security testing software is ranked first on Everything Xiaomi?
Aikido CSPM is ranked #1 of 14 with a score of 7.3. HCL AppScan is second and Waratek IAST third.
How many of these have a free plan?
4 of the 14 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Aikido CSPM has the lowest first paid tier we found: $300/mo.
How is this list ranked?
Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.