Best Interactive Application Security Testing Software in 2026
Updated
In short: NowSecure Platform is ranked #1 of 14 as of 4 October 2026, ahead of Aikido CSPM and DongTai IAST. The best-ranked option with a free plan is Aikido CSPM. The lowest first paid tier on this page is Aikido CSPM at $300/mo.
Interactive application security testing software focuses on assessing applications during runtime. Compare API and authenticated testing with instrumentation, language coverage, and runtime targets. CI/CD integration and deployment options can help you judge how an offering might fit development processes, while free-plan availability and paid-from pricing provide cost details. The ranking begins with NowSecure Platform and Aikido CSPM, followed by HCL AppScan and New Relic IAST. DongTai IAST, Contrast Assess, Veracode DAST, and Black Duck Polaris also appear among the first entries. Consider the listed testing coverage and integration criteria in relation to the applications and workflows you need to address.
14 interactive application security testing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 NowSecure Platform iPhone + Android RecognisedPhone appDocumentedFree plan 7.2 Runtime targets: mobileDeployment: saasAuthenticated testing: Yes
- 2 Aikido CSPM No phone app RecognisedPhone appDocumentedFree plan 6.4$300/mo
- 3 DongTai IAST No phone app RecognisedPhone appDocumentedFree plan 6.4Free Runtime targets: webDeployment: hybrid
- 4 HCL AppScan No phone app RecognisedPhone appDocumentedFree plan 6.4Free Runtime targets: allDeployment: hybridAuthenticated testing: Yes
- 5 New Relic IAST No phone app RecognisedPhone appDocumentedFree plan 6.4Free Runtime targets: webDeployment: saasAuthenticated testing: Yes
- 6 Waratek IAST No phone app RecognisedPhone appDocumentedFree plan 6.4$2,499/mo Deployment: hybrid
- 7 Contrast Assess No phone app RecognisedPhone appDocumentedFree plan 5.9 Deployment: hybrid
- 8 Veracode DAST No phone app RecognisedPhone appDocumentedFree plan 5.8 Deployment: saas
- 9 Black Duck Polaris No phone app RecognisedPhone appDocumentedFree plan 5.7
- 10 Acunetix No phone app RecognisedPhone appDocumentedFree plan 5.5 Deployment: hybridAuthenticated testing: Yes
- 11 Checkmarx API Security No phone app RecognisedPhone appDocumentedFree plan 5.5
- 12 Invicti No phone app RecognisedPhone appDocumentedFree plan 5.5
- 13 OpenText Fortify on Demand No phone app RecognisedPhone appDocumentedFree plan 5.5 Runtime targets: webDeployment: saasAuthenticated testing: Yes
- 14 Black Duck Seeker No phone app RecognisedPhone appDocumentedFree plan 5.4 Runtime targets: webDeployment: self-hosted
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which interactive application security testing software is ranked first on Samsung Mobile US Press?
NowSecure Platform is ranked #1 of 14 with a score of 7.2. Aikido CSPM is second and DongTai IAST third.
How many of these have a free plan?
4 of the 14 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Aikido CSPM has the lowest first paid tier we found: $300/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.