Waratek IAST
Dublin, Ireland
What it is
Waratek IAST monitors Java application behavior while code runs to identify vulnerabilities. Runtime instrumentation tracks data flow and execution paths inside the application. Findings can include the relevant code line, a full stack trace, and the data flow leading to an issue. Waratek says the product analyzes compiled bytecode or binaries without requiring source code access. QA teams or automated suites can generate security insights during standard functional tests, without a separate security scan phase. Deployment options include a Portal SaaS service and an on-prem Portal Dedicated deployment. Starter is a free trial for one application with runtime analysis, basic CI/CD integration, standard vulnerability reporting, and email and knowledge base support. Team costs $2,499 per month and includes three applications, with an option to add up to two for $833/mo per additional app. Jira and Slack integrations are marked Coming Soon. Enterprise is custom-priced, and several of its listed capabilities are also marked Coming Soon.
For and against
For
- Findings include code lines and stack traces.
- Does not require source code access.
- Insights arise during regular functional tests.
- Portal SaaS and on-prem deployment options.
Against
- Platform scope is Java applications.
- No free plan is listed.
- Team costs $2,499 per month.
- Jira and Slack integrations are Coming Soon.
The verdict
Waratek IAST adds runtime vulnerability analysis to Java application testing workflows. Review the application limits, deployment options, and capabilities marked Coming Soon before selecting a plan.
Who it suits
Waratek positions Starter for software and security engineers, Team for growing engineering and QA teams, and Enterprise for mid-market to large enterprises. It is for teams working with Java applications.
Plans and prices
Starter
1 application per organization · full IAST runtime analysis · basic CI/CD integration · standard vulnerability reporting
Read 3 Oct 2026 · waratek.com
Team
3 applications included, scale up to 5 · +$833/mo per additional app (up to 2) · team collaboration · Jira & Slack integrations (Coming Soon)
Read 3 Oct 2026 · waratek.com
Enterprise
Custom / unlimited applications · advanced CI/CD plugins, custom rulesets, and software composition analysis marked Coming Soon · dedicated success manager · priority support and custom onboarding with same-business-day max response
Read 3 Oct 2026 · waratek.com
On the record
- Accuracy claim
- Waratek reports a 100% true positive rate, 0% false positive rate, and OWASP Benchmark score of 100.waratek.com · read 3 Oct 2026
- Company background
- Waratek says the company launched in 2018 and lists its Dublin address in Ireland.waratek.com · read 3 Oct 2026
- Deployment
- Waratek documentation describes a Portal SaaS option and an on-prem Portal Dedicated deployment.docs.waratek.com · read 3 Oct 2026
- Enterprise features
- Enterprise lists custom rulesets, advanced CI/CD plugins, and software composition analysis as Coming Soon.waratek.com · read 3 Oct 2026
- Feedback
- Vulnerability findings include the exact line of code, full stack trace, and the data flow that led to the issue.waratek.com · read 3 Oct 2026
- Integrations
- The Team plan lists Jira and Slack integrations, marked Coming Soon, and the Starter plan includes basic CI/CD integration.waratek.com · read 3 Oct 2026
- Platform scope
- Waratek describes its application security platform as being for Java applications.docs.waratek.com · read 3 Oct 2026
- Purpose
- Waratek IAST monitors application behavior during execution to find vulnerabilities in running code.waratek.com · read 3 Oct 2026
- Runtime analysis
- The product observes data flow and execution paths in real time using runtime instrumentation inside the application.waratek.com · read 3 Oct 2026
- Security controls
- The Team plan lists SSO / SAML.waratek.com · read 3 Oct 2026
- Source code
- Waratek says IAST analyzes compiled bytecode or binaries and does not require source code access.waratek.com · read 3 Oct 2026
- Support
- Starter includes email and knowledge base support; Team includes email, chat, and knowledge base support with a 48-hour maximum response.waratek.com · read 3 Oct 2026
- Testing workflow
- IAST generates security insights while QA teams or automated suites run their standard functional tests, without a separate security scan phase.waratek.com · read 3 Oct 2026
- Who it is for
- Waratek positions Starter for software and security engineers, Team for growing engineering and QA teams, and Enterprise for mid-market to large enterprises.waratek.com · read 3 Oct 2026
