Datadog Runtime Code Analysis
LeaderDatadog provides cloud-scale monitoring and security for metrics, traces and logs in one unified platform.
Est 2010|Valuation $91.4B|Raised $795.9M
Datadog provides cloud-scale monitoring and security for metrics, traces and logs in one unified platform.
Published May 16, 2026
Datadog-authored materials report that adding runtime context reduces the subset of vulnerabilities requiring immediate attention (for example, vendor-reported statistics on how CVSS scores change when runtime context is applied). These findings are vendor-authored and should be treated as directional rather than independent measurements. Source: official vendor report and press materials.
| Starting Price | Published per-host pricing available from the vendor; see product pricing page and published pricing list | Public pricing typically not itemized; quote/package-based — contact vendor for pricing details | Published per-developer pricing available from the vendor; see product pricing page (products purchased separately) |
| Most applicable for | Organizations that already standardize on Datadog APM/observability and want runtime vulnerability findings integrated with operational context | AppSec programs prioritizing in-app sensors and specialized application security tooling | Organizations prioritizing shift-left developer workflows across repositories/CI with strong SCA/SAST focus |
| Key advantage | Integration of runtime findings with observability context and lifecycle workflows within the Datadog platform (vendor-reported reduction in false positives) | Long-standing focus on instrumented application security and in-app sensors | Extensive developer integrations and wide coverage of SCA/SAST for CI/CD and repo-level scanning |
| Key limitation | Requires tracer instrumentation and supported languages; platform cost considerations and traffic-dependent detection coverage | Pricing and packaging may require additional operational investment if Datadog is already in use | Not IAST-first; runtime exploitability context typically requires additional tooling |