AppSecNews

IAST

Interactive Application Security Testing

Instrument the running application to observe real data flow during functional testing.

6 tools profiled

How it differs An agent inside the running app reports vulnerabilities while tests exercise it. DAST sees only HTTP responses; RASP uses similar instrumentation to block attacks in production instead.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Go Clear all

  • Contrast Security

    Contrast Security

    IAST

    Agent based platform that instruments running applications to detect vulnerabilities, inventory libraries actually loaded, and optionally block attacks in production.

    Commercial
    Established

  • Seeker IAST

    Black Duck

    IAST

    Agent based interactive testing that instruments the running application, tracks tainted and sensitive data through it, and replays requests to confirm exploitability.

    Commercial
    Established

  • Contrast Security

    Contrast Security

    Agent based platform that instruments running applications to detect vulnerabilities, inventory libraries actually loaded, and optionally block attacks in production.

    Commercial Established
    IAST

  • Seeker IAST

    Black Duck

    Agent based interactive testing that instruments the running application, tracks tainted and sensitive data through it, and replays requests to confirm exploitability.

    Commercial Established
    IAST
Tick up to 4 tools above.