Best Interactive Application Security Testing (IAST) Software - Page 2

How Many Interactive Application Security Testing (IAST) Software Products Does G2 Track?

Total Products under this Category: 19

Category Stats (Sep 2026)

  • Average Rating: 4.45/5 (↓0.01 vs Aug 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Black Duck Polaris Platform (+2.92%) - Among all products in this category, Black Duck Polaris Platform recorded the largest rating increase compared to last month

Last updated: September 15, 2026

How Does G2 Rank Interactive Application Security Testing (IAST) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 800+ Authentic Reviews
  • 19+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Interactive Application Security Testing (IAST) Software

G2 Grid® for Interactive Application Security Testing (IAST) Software plotting products by satisfaction and market presence

Highlighted products: Aikido Security, Black Duck Polaris Platform, Checkmarx, HCL AppScan, OpenText Core Application Security, Invicti, Contrast Security, and Semgrep.

Underlying data: [Grid® JSON](https://www.g2.com/categories/interactive-application-security-testing-iast/grids.json?focus%5B%5D=aikido-security&focus%5B%5D=black-duck-polaris-platform&focus%5B%5D=checkmarx&focus%5B%5D=hcl-appscan&focus%5B%5D=opentext-core-application-security&focus%5B%5D=invicti&focus%5B%5D=contrast-security-contrast-security&focus%5B%5D=semgrep)

Data Theorem

RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind Data Theorem?

  • Seller: Data Theorem
  • Year Founded: 2013
  • HQ Location: Palo Alto, California, United States
  • LinkedIn® Page: www.linkedin.com
    94 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Data Theorem?

esChecker MAST (SAST, DAST & IAST)

esChecker combines many years of penetration testing experience with a unique dynamic engine simulating attack techniques, such as reverse-engineering or code tampering. No source code is needed, only the app binary (Android apk or iOS ipa). esChecker provides immediate feedback about the way your app reacts against many hacking techniques. You can now spare your pentest budget for in-depth vulnerability analyses.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate esChecker MAST (SAST, DAST & IAST)?

  • Ease of Use: 10.0/10 (Category avg: 8.3/10)
  • Quality of Support: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind esChecker MAST (SAST, DAST & IAST)?

  • Seller: eShard
  • Year Founded: 2015
  • HQ Location: Pessac, FR
  • LinkedIn® Page: www.linkedin.com
    47 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of esChecker MAST (SAST, DAST & IAST)?

Quokka Q-mast

Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub. Q-mast capabilities: • Automated scanning in minutes, no source code needed • Analysis of compiled app binary, regardless of in-app or run-time obfuscations • Precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries • Comprehensive static (SAST), dynamic (DAST), interactive (IAST), and forced-path execution app analysis • Malicious behavior profiling, including app collusion • Checks against privacy & security standards: NIAP, NIST, MASVS

Who Is the Company Behind Quokka Q-mast?

ZeroDay

An advanced interactive application security tool identifying vulnerabilities in both self-developed code and open-source dependencies. Seamlessly integrate into CI/CD and can be applied in both application development phase and application deployment phase.

Who Is the Company Behind ZeroDay?

  • Seller: ZeroDay
  • Year Founded: 2013
  • HQ Location: London, GB
  • LinkedIn® Page: www.linkedin.com
    4 employees on LinkedIn®
Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024