As of September 2026, Latka tracks 3 interactive application security testing software companies with $1M–$5M in annual revenue. They have combined revenues of $8.1M and employ 131 people. They serve 2.8M customers combined.
Every company below sells interactive application security testing software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Interactive Application Security Testing (IAST) Software is a security testing methodology designed to identify vulnerabilities within applications in real time. By monitoring application behavior during various testing processes, such as quality assurance (QA) or automated testing, IAST tools analyze code execution, data flow, and system responses, providing immediate feedback on security issues. The primary use cases of IAST include vulnerability detection during the application development cycle, production monitoring, and integration with continuous integration/continuous deployment (CI/CD) pipelines. Typical features include automated scanning, real-time risk assessment, and reporting capabilities that assist development and security teams in ensuring the security posture of applications. Common buyer personas include security analysts, application developers, and quality assurance professionals who seek to enhance application security measures throughout the software development lifecycle.
Sorting: Highest -> Lowest
Showing 3 of 3 companies ranked by annual revenue.
Palo Alto, California, United States
Developer of a cloud based mobile application scanner designed to scan and secure mobile applications. The company's cloud based mobile application scanner automatically detects security breaches, flaws and data privacy gaps and locks down the high-risk areas of mobile applications, enabling individuals to secure and protect their mobile applications.
San Francisco, California, United States
Built for Modern AI Security Teams. Akto is the Agentic AI Security platform for your teams to secure AI agents, MCPs, and LLMs in your organization. Akto's platform helps teams build their Agentic AI Security program through Discovery, Governance, red teaming, monitoring, and enforcing guardrails on Agentic AI assets. 100+ Modern AI Security teams globally trust Akto for: - MCP Security - AI Agent Security Akto is headquartered in San Francisco and backed by leading venture capital firms, including Accel Partners and Alumni Ventures, with angel and advisory from Tenable Founder, Notion Founder, Sentry CEO, Jim Manico, and Synack CTO, among others. Akto has been featured in Forbes, Nasdaq, Dark Reading, Venture Beat, and CSO Online as one of the cybersecurity startups to watch. Akto is a representative vendor in Gartner® Market Guide for API Protection, Gartner® Hype Cycle for APIs, and Gartner® Hype Cycle for Application Security.
Singapore, Singapore, Singapore
GuardRails is a continuous application security verification platform that empowers modern development teams to find, fix and prevent vulnerabilities related to source code, open source libraries, secret management and cloud configuration.
Latka tracks 3 interactive application security testing software companies with $1M–$5M in annual revenue. Together they generate $8.1M in annual revenue and employ 131 people.
Data Theorem is the largest, with $3.9M in annual revenue, founded in 2013.
The average interactive application security testing software company in this list makes $2.7M a year, across 3 companies with reported revenue. They serve 2.8M customers combined.
Ranked by annual revenue, the leaders are Data Theorem, Akto.io and GuardRails.
- The software must provide real-time monitoring of applications to identify vulnerabilities during runtime. - It should integrate with existing development workflows and tools, such as CI/CD pipelines. - The product must offer automated scanning capabilities to assess application security continuously. - It should provide detailed reporting on vulnerabilities and security risks discovered. - The tool must support both static and dynamic analysis techniques, not just one method exclusively. - It must cater to software development teams, including application developers and security analysts.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time