RASP

Runtime Application Self-Protection

Detect and block attacks from inside the running application process.

9 tools profiled

How it differs Runs inside the production app and blocks attacks as they happen. IAST finds bugs with similar instrumentation during testing; a WAF filters traffic in front of the app rather than inside it.

5 tools match

Sort

Active PHP Clear all

Datadog Application Security

Datadog

RASP

Runtime application protection layered onto Datadog's existing APM tracing libraries, detecting and blocking attacks from inside the application and correlating them with traces.

Commercial

Growing Compare Datadog Application Security
Dynatrace

Dynatrace

RASP

Application security built on Dynatrace OneAgent instrumentation, identifying vulnerable libraries loaded in running processes and blocking injection attacks at execution points.

Commercial

Established Compare Dynatrace
K2 Cyber Security

New Relic

RASP

A runtime protection agent that models an application's expected execution flow and flags deviations, detecting injection and memory attacks without signatures; technology now part of New Relic.

Commercial

Growing Compare K2 Cyber Security
Oligo Security

Oligo Security

RASP

Uses eBPF sensors to observe how application libraries actually behave at runtime, profiling normal activity to flag deviation and to show which vulnerable dependencies are genuinely in use.

Commercial

Emerging Compare Oligo Security
OpenRASP

Baidu

RASP

An open source runtime protection agent that hooks sensitive application functions and evaluates each call in context with JavaScript plugins rather than matching traffic signatures.

Open source

Growing Compare OpenRASP

Datadog Application Security

Datadog

Runtime application protection layered onto Datadog's existing APM tracing libraries, detecting and blocking attacks from inside the application and correlating them with traces.

Commercial Growing

RASP Compare Datadog Application Security
Dynatrace

Dynatrace

Application security built on Dynatrace OneAgent instrumentation, identifying vulnerable libraries loaded in running processes and blocking injection attacks at execution points.

Commercial Established

RASP Compare Dynatrace
K2 Cyber Security

New Relic

A runtime protection agent that models an application's expected execution flow and flags deviations, detecting injection and memory attacks without signatures; technology now part of New Relic.

Commercial Growing

RASP Compare K2 Cyber Security
Oligo Security

Oligo Security

Uses eBPF sensors to observe how application libraries actually behave at runtime, profiling normal activity to flag deviation and to show which vulnerable dependencies are genuinely in use.

Commercial Emerging

RASP Compare Oligo Security
OpenRASP

Baidu

An open source runtime protection agent that hooks sensitive application functions and evaluates each call in context with JavaScript plugins rather than matching traffic signatures.

Open source Growing

RASP Compare OpenRASP

Pick at least one more