AppSecNews

Top 10
Articles
About
Contact

Browse by category

SAST31 Static Application Security Testing
SCA28 Software Composition Analysis
DAST34 Dynamic Application Security Testing
IAST6 Interactive Application Security Testing
RASP9 Runtime Application Self-Protection
AI Security45 AI and LLM Security
API Security9 API Security
IaC Security17 Infrastructure as Code Security
ASPM16 Application Security Posture Management
Mobile Security23 Mobile Application Security
Container Security8 Container and Image Security
Secret Scanning9 Secret Detection and Scanning
WAF1 Web Application Firewall

Start here

All categories
Top 10 lists by category
Buyer guides and comparisons

Counts are published profiles. Every listing follows the same editorial standard; none are paid for.

Top 10
Articles
About
Contact

Runtime Application Self-Protection

Detect and block attacks from inside the running application process.

9 tools profiled

How it differs Runs inside the production app and blocks attacks as they happen. IAST finds bugs with similar instrumentation during testing; a WAF filters traffic in front of the app rather than inside it.

Filters

License

Open source 1 Open source and commercial 0 Commercial 0 Commercial, free tier 0 Freemium 0 Free 0

Subcategory

Runtime Protection 0 Virtual Patching 1 Application Agent 0 Bytecode Instrumentation 0 Agent Module Architecture 0 Api Protection 0 Application Detection Response 0 Attack Detection 0 Container Security 0 Control Flow Integrity 0 Ebpf Instrumentation 0 Grammar Based Detection 0 Hook Based Detection 0 Interactive Testing 0 Java Agent 0 Java Runtime Protection 0 Legacy Remediation 0 Library Behavior Monitoring 0 Next Gen Waf 0 Observability Integrated 0 Php Extension 0 Request Inspection 1 Rule Engine 1 Runtime Reachability 0 Runtime Sca 0 Runtime Vulnerability Analytics 0 Threshold Blocking 0 Web Application Firewall 1

Deployment

Agent 0 Kubernetes 1 Self hosted 1 Library 1 SaaS 0 CLI 0

Languages

Java 0 PHP 0 Dotnet 0 JavaScript 0 Python 0 Go 0 Ruby 0

Integrations

Kubernetes 0 Splunk 0 Jira 0 Slack 0 Syslog 0 Apache 1 Aws 0 Envoy 1 Haproxy 1 Jenkins 0 Nginx 1 PagerDuty 0 Azure 0 Datadog 0 Elasticsearch 0 Gcp 0 GitHub 0 Iis 1 Kubernetes Ingress Nginx 1 Openshift 0 ServiceNow 0 Terraform 0

Maturity

Established 1 Growing 0 Emerging 0

Signals Verified profile 0 Has endorsements 0

Clear

1 tool match

Sort

Active Kubernetes Ingress Nginx Clear all

ModSecurity

OWASP

RASP

An open source web application firewall engine that embeds in a web server or proxy and evaluates requests and responses against a rule language, most often the OWASP Core Rule Set.

Open source

Established Compare ModSecurity

ModSecurity

OWASP

An open source web application firewall engine that embeds in a web server or proxy and evaluates requests and responses against a rule language, most often the OWASP Core Rule Set.

Open source Established

RASP Compare ModSecurity

Tick up to 4 tools above.

Pick at least one more

Other categories

← Interactive Application Security Testing AI and LLM Security →

SAST
SCA
DAST
IAST
AI Security
API Security
IaC Security
ASPM
Mobile Security
Container Security
Secret Scanning
WAF

Newsletter

AppSecNews Weekly

New tool profiles, head to head comparisons and guides, in one short email. No tracking pixels, and every issue has a one click unsubscribe. Read past issues

Leave this field empty

Email address

Email me the newsletter. One click in any issue unsubscribes, and the address is never shared or sold. We send a confirmation link first.

AppSecNews

Independent research on application security tooling, written for the people who have to choose it.

editorial policy

Every profile follows one published standard: no pricing, no version claims, no invented ratings, and a limitations section for every tool. Listings are never paid for. Advertising is labelled and never affects placement. Read the policy

1 tool match

ModSecurity

ModSecurity