PAGES
← all tools
◆ SAST / SCA / Code Security

Waratek

Waratek Unveils AI Phylax at Oracle AI World: A Runtime Guardian That Stops Attacks on Java-based AI Agents (2026-10-28) commercial

Waratek is a Java application security platform that provides runtime protection against vulnerabilities and attacks without code modification.

source ↗ rss ↗ What is a cyber toolchain?

Summary

Waratek is a commercial Runtime Application Self-Protection (RASP) solution that blocks exploitation of unsafe Java reflection and dynamic class-loading vulnerabilities by hooking into the Reflection API and tracking untrusted data at the JVMJVMThe Java Virtual Machine, a runtime maintained by Oracle (and implemented by others) that executes Java bytecode on any OS, giving cyber tools a portable, garbage-collected environment with a large ecosystem of libraries. layer. It is run as a service and is intended for application developers concerned with java-security. Its documentation positions it alongside other in-application security controls. The tool was launched in 2009 and has seen a release this week.

Waratek is a Java application security platform that provides runtime protection against vulnerabilities and attacks without code modification.

Waratek publishes no documentation we track, so the description above is written from general knowledge rather than the vendor's own words.

How Waratek helps

Can I stop a reflection-based zero-day from being exploited before a patch exists?

hooks into the Reflection API so it can block the unsafe call at the moment it happens, independent of whether the vulnerable library has a fix released

Do I have to touch application code or redeploy to close off a reflection vulnerability?

applies the protection at the JVM layer against the running application, so the block takes effect without source changes, rebuilds, or restarts

Which of my protected applications are actually covered once I turn on a new protection rule?

a rule enabled once from the portal applies immediately across every protected application, so there's no per-app rollout to track

Languages

Not documented

Release-note detail over time

See how much detail Waratek puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Commercials

pricing & packaging history · Waratek vendor page

9 readings of Waratek's pricing page since Sep 2023, with 3 relaunches of its plan lineup — each one dated, compared with the reading before it, and explained for someone buying the tool.

Pricing and packaging history is included with Researcher and Business. See how every vendor we track sells, and how that has changed over time, using data we don't publish anywhere else.

See plans →

Website history

waratek.com, every change

Waratek's home and pricing pages and 8 more pages as they looked each month from September 2021 to October 2026: 25 renders, 4 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

2 entries

  1. October 20261
  3. August 20261

    2 entries

    1. Waratek Unveils AI Phylax at Oracle AI World: A Runtime Guardian That Stops Attacks on Java-based AI Agents (2026-10-28) Oct 28, 2026 · issue 124

      Waratek adds AI Phylax, a runtime guardian that enforces immutable security rules to block prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and tool hijacking in Java-based AI agents⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

      • AI Phylax applies deterministic protection — the same security rule produces the same outcome every time — so security teams get certainty against attacks regardless of phrasing or attack origin, without disrupting legitimate agent behavior.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

      1 detail in Everything

    2. Waratek Launches Reflection Protection, a Zero-Configuration Defense Against Known and Zero-Day Unsafe Java Reflection and Class-Loading Attacks (2026-08-18) Aug 18, 2026 · issue 054

      Waratek adds Reflection Protection rule to RASP for Java, blocking unsafe reflection and dynamic class-loading attacks at the JVMJVMThe Java Virtual Machine, a runtime maintained by Oracle (and implemented by others) that executes Java bytecode on any OS, giving cyber tools a portable, garbage-collected environment with a large ecosystem of libraries. layer with zero configuration.

      └──▷ HOW TO FIND IT
      Enable Reflection Protection across all protected Java applications without any configuration or downtime.
      📍In the Waratek Portal, open the rule wizard, locate the Reflection Protection rule, and enable it. Protection takes effect immediately at the JVM layer across all connected applications.
      • New Reflection Protection rule for Waratek RASP for Java blocks exploitation of unsafe Java reflection and dynamic class-loading vulnerabilities — including zero-dayszero-daysA vulnerability for which defenders have had no prior opportunity to apply a fix, often because it was previously unknown. A zero-day exploit takes advantage of that gap. — by hooking into the Reflection API and tracking untrusted data at the JVM layer.
      • Enables protection against the full class of unsafe reflection attacks (e.g. Class.forName() and .newInstance() abuse patterns) without requiring source code changes, redeployment, or application downtime.
      • Rule can be enabled directly from the Waratek Portal's rule wizard with no configuration required, taking effect immediately across all protected applications.

      3 details in Everything

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    compare.md

      Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

      my-toolchain — 0 tools

        Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
        browse all tools → score card for your toolchain →
        cyber-toolchain / feedback

        Send us feedback