Datadog Runtime Code Analysis (IAST)

Datadog Runtime Code Analysis (IAST) is an Interactive Application Security Testing solution that analyzes application code during runtime to identify security vulnerabilities. The tool operates by instrumenting applications to monitor code execution and data flow in real-time, detecting vulnerabilities as the application runs.

The solution integrates with Datadog's broader Application Performance Monitoring and observability platform, allowing security teams to identify and remediate code-level vulnerabilities within their existing monitoring workflows. It provides runtime analysis capabilities that complement static code analysis by detecting issues that only manifest during application execution.

The tool is designed to work within development and production environments, providing continuous security testing as part of the software development lifecycle. It analyzes application behavior and code paths during runtime to identify security flaws such as injection vulnerabilities, insecure configurations, and other code-level security issues.

As part of Datadog's Code Security suite, the IAST solution works alongside other security capabilities including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Infrastructure as Code (IaC) security scanning to provide comprehensive application security coverage.