17.9
Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Free planWebAPILinux
Best Interactive Application Security Testing Software in 2026
Interactive application security testing (IAST) software checks for security issues as an application runs, so the right fit depends on the code, runtime, and workflow you need to cover. Compared on API testing, authenticated testing, CI/CD integration, deployment, free plans, instrumentation, language coverage, paid-from pricing, and runtime targets, these entries offer several angles for narrowing your options.…
27.7
HCL AppScan identifies and prioritizes software vulnerabilities, and helps teams remediate them across the development lifecycle.
Free planWebAPIExtension
36.8
Waratek IAST monitors Java applications during execution to find vulnerabilities in running code.
Free planWebLinuxSelf-hosted
- 4
Acunetix
Acunetix, now Invicti Web + API, scans running web applications and APIs for exploitable vulnerabilities.
WebAPILinuxSelf-hosted6.7$500 one-time - 5
DongTai IAST
DongTai IAST is an open-source interactive application security testing tool for analyzing application traffic and detecting vulnerabilities in Java…
Free planWebAPILinuxSelf-hosted6.5Free plan - 6
Contrast Assess
Contrast Assess is an Interactive Application Security Testing tool for identifying security risks in running applications.
WebAPILinuxmacOS6.3 - 7
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 8
New Relic IAST
New Relic IAST probes running application code to identify vulnerabilities that could be exploited, helping DevOps and security teams address risk…
Free planWeb6.2Free plan - 9
NowSecure Platform
NowSecure Platform gives organizations visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps they build, use, or manage.
AndroidiOSWebAPI6.0 - 10
Black Duck Polaris
Black Duck Polaris is a cloud-native application security testing platform that brings security analysis together across the software development life cycle.
WebAPI5.8 - 115.3From $20 a month
- 12
Black Duck Seeker
WebLinuxmacOSWindows5.0 - 13
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 144.8