Where this offering fits
This IAST enquiry concerns interactive application testing, which uses a running and instrumented application where supported. Confirm the current Checkmarx offer and version support explicitly; a retained catalogue URL should not be treated as proof that a particular component remains separately orderable.
Architecture and rollout decisions
Define the test environment, runtime and workloads that would exercise the application. Review instrumentation requirements and potential impact with engineering. An evaluation should show the relationship between exercised functions and resulting findings. Unvisited application paths should remain a visible coverage limitation rather than an implied clean result.
An evaluation scenario for this offering
First confirm the currently offered IAST component and runtime support for the intended test application. If suitable, define three staged journeys and exercise only two while keeping the third as a known coverage gap. Review the resulting findings and runtime context with engineering, then deliberately run the missing journey under the same authorised method. Compare the evidence before and after. The evaluation should show the relationship between exercised behaviour and observable results, plus any instrumentation impact. An unvisited path should remain an explicit limitation rather than be reported clean merely because no finding was produced for it.
Evidence to request for this scope
- Request current IAST availability and supported-runtime evidence.
- Approve instrumentation and representative test flows.
- Record exercised paths and validation limits.