Waratek

What Waratek does

Waratek is a private application security software company headquartered in Dublin, Ireland with a regional office in Chicago, Illinois. The company sells a unified runtime application security platform that operates inside the Java Virtual Machine, combining Waratek IAST (Interactive Application Security Testing) for Shift Left vulnerability detection during development with Waratek RASP (Runtime Application Self-Protection) for Shield Right protection of production applications against zero-day and AI-driven attacks. The platform is differentiated by its compiler-based runtime instrumentation and a patented Data Tainting Engine that tracks untrusted data through the JVM and flags vulnerabilities only when data reaches exploitable execution points, with claimed 100% accuracy on the OWASP Benchmark and zero false positives.

Name

Waratek

Legal name

Waratek Ltd

Website

https://waratek.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

51–100 employees

Ownership category

akta.pro rank

Product category

Application Security Software

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYHDADACAC

Application Security Testing (SAST/DAST/IAST/SCA)

Hardware, Technology & Telecom/Cybersecurity/Application & API Security

SECONDARYHDADAHAA

Vulnerability Assessment & Scanning

Hardware, Technology & Telecom/Cybersecurity/Vulnerability & Exposure Management (VM, ASM, BAS)

Keywords

• Runtime application security
• Interactive application security testing
• Runtime application self-protection
• Compiler-based security platform
• JVM application security

Headquarters

HQ city

Dublin

HQ country

Ireland

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Software Subscriptions (SaaS and On-Prem): Waratek offers both SaaS Services (cloud-based access to the platform) and On-Prem Services (license to install software on customer premises). Both are sold via subscription with term lengths defined in Order Forms. The company provides security-as-code software products and services enabling customers to automate remediation of code vulnerabilities and patch management.
2. Agent-Based Licensing: Services may be accessed and licensed on a per agent basis, per event basis, per user basis, per seat basis, or under other usage-based models as defined in Order Forms.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

Waratek provides a compiler-based runtime application security platform that embeds security directly into the JVM runtime environment. Its offering combines Interactive Application Security Testing (Waratek IAST) for finding vulnerabilities during pre-production with Runtime Application Self-Protection (Waratek RASP) for blocking attacks in production. The platform analyzes bytecode/binary execution and is designed to detect 100% of exploitable vulnerabilities with zero false positives, including AI-generated code flaws, and to block zero-day and polymorphic attacks in production.

Product overview

Waratek offers a unified runtime application security platform consisting of two core products: Waratek IAST (Interactive Application Security Testing) for the Shift Left strategy that identifies vulnerabilities during development with 100% accuracy, and Waratek RASP (Runtime Application Self-Protection) for the Shield Right strategy that blocks attacks in production including zero-days. The two products can be used independently or combined as Waratek IAST + RASP, where vulnerabilities found by IAST inform RASP's protection rules, and RASP shields vulnerable code in production while developers remediate in subsequent sprints.

Differentiator

Problem solved

Functional benefit

Brands

• Waratek IAST: Interactive Application Security Testing solution that identifies vulnerabilities during development and QA by monitoring code execution in the JVM runtime environment.
• Waratek RASP

Products and services

• Waratek IAST Interactive Application Security Testing solution that operates inside the JVM runtime to identify exploitable security flaws during development and QA by analyzing compiled bytecode/binary execution rather than source text. Designed for enterprise development and security teams needing to catch AI-generated code vulnerabilities without false positives and without requiring source code access.
• Waratek RASP Runtime Application Self-Protection solution that observes application code execution at the JVM level and blocks attempts to alter intended behavior, protecting against zero-days, AI-driven attacks, and polymorphic threats. Provides virtual patching without code changes or downtime; targeted at security and DevSecOps teams running mission-critical Java applications.
• Waratek IAST + RASP Combined IAST and RASP offering that creates a closed-loop security lifecycle: vulnerabilities found by IAST inform RASP's protection rules, while RASP shields vulnerable code in production while developers remediate in subsequent sprints. Positioned for enterprises seeking a single unified runtime application security platform across the SDLC.

Quantifiable outcome

• 100% detection accuracy on OWASP Benchmark with 0% false positive rate
• +3 more outcomes

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• Authorized Reseller PartnerscoreChannel Partner/ Reseller/ DistributorWaratek works with authorized Partners who are permitted to resell the Licensed Software Agent and accompanying Documentation. Customers agree to register the Licensed Software Agent only with a Partner or Waratek and shall only install software obtained directly from a Partner or Waratek.

Scale indicators2 records

Recent moves5 records

Expansion highlights4 records

Direct peers

• Contrast Security: Contrast Security is the closest direct competitor to Waratek, offering both IAST and RASP products that instrument application runtimes (including Java) to find vulnerabilities and block attacks. Both vendors compete on the same Shift Left + Shield Right messaging, target the same enterprise AppSec buyer, and use runtime instrumentation as their core differentiator versus traditional SAST/DAST tools.
• Veracode: Veracode is a long-established application security platform offering SAST, DAST, IAST, and software composition analysis used by large enterprises to secure development pipelines. While Veracode's heritage is in static and dynamic scanning, its IAST product competes head-to-head with Waratek IAST for the same AppSec testing budget within enterprise security teams.
• Snyk: Snyk is a developer-first security platform covering SAST, SCA, container, and infrastructure-as-code security, used by enterprises to secure the software development lifecycle. It competes with Waratek's IAST capabilities for developer-security budget and increasingly overlaps in AI-code security positioning.
• Checkmarx: Checkmarx is an enterprise application security platform offering SAST, SCA, IAST, and API security used by large enterprises and regulated industries. Its IAST offering and broader AppSec platform compete directly with Waratek's combined IAST + RASP positioning for enterprise application security budget.

Broad incumbents

• Datadog Application Security Management: Datadog's Application Security Management (ASM) module offers runtime application protection integrated with its broader observability platform, competing with Waratek RASP for enterprises that prefer consolidating security and monitoring into a single vendor. Datadog's scale and bundled APM stack make it a significant incumbent threat.
• Dynatrace Application Security: Dynatrace (which acquired Runecast and built on its AppSec capabilities from its observability platform) provides runtime vulnerability detection for production applications. It competes with Waratek RASP within enterprise accounts already standardized on Dynatrace for APM, particularly for Java workloads.
• Imperva Runtime Application Self-Protection: Imperva (a Thales company) offers RASP as part of its broader application and data security portfolio, including WAF and database protection. It competes with Waratek RASP within large enterprises that prefer consolidated web application and runtime defense from a single established vendor.
• New Relic IAST: New Relic offers IAST capabilities integrated into its observability platform, providing vulnerability detection for Java and other runtimes during application testing. It competes with Waratek IAST within enterprises already running New Relic for APM and seeking bundled observability + security.
• Akamai (Guardicore / App & API Protector): Akamai's security portfolio (including Guardicore segmentation and App & API Protector) provides runtime application and API protection at the edge and within enterprise environments. It competes with Waratek RASP for budget allocated to runtime defense within large, globally distributed enterprises.

Emerging players

• Aqua Security: Aqua Security provides runtime container and cloud-native application protection, with overlap to Waratek RASP in protecting workloads running in containers and Kubernetes. While Aqua focuses on the broader cloud-native security lifecycle, its runtime protection capabilities compete with Waratek for modern Java workload defense budgets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/waratek-ltd
• Xx.com/waratek

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Waratek