---
title: Install IAST
source: https://docs.newrelic.com/docs/iast/install
---

> #### ⚠️ IMPORTANT
>
> Run IAST with non-production deployments only. IAST tests by invoking HTTP requests with an exploit payload. You must use IAST in non-production environments with only simulated data to avoid both data corruption and introducing exploits into your live code. In addition, when you run IAST on new code in pre-production, you catch potential vulnerabilities before they go live.

To install New Relic IAST:

1.  Go to **[one.newrelic.com](https://one.newrelic.com) > All capabilities > IAST** and click **Set up IAST with applications**.
    ![Set up IAST with applications](https://docs.newrelic.com/images/iast_screenshot-full_install.webp "Set up IAST with applications")
2.  Confirm IAST isn't running in a production environment and click **Continue**.
3.  Select the language of your application and complete the steps.
    ![Install New Relic IAST](https://docs.newrelic.com/images/iast_screenshot-crop_install.webp "Install New Relic IAST")
4.  Make sure your `newrelic.yml` config file is updated as follows:
    **`newrelic.yml` config file**
    ````yml
    security:
        enabled: true
        agent:
            enabled: true
    ```

    ````
    **`newrelic.yml` config file for EU**
    ````yml
    security:
        enabled: true
        agent:
            enabled: true
        validator_service_url: wss://csec.eu01.nr-data.net
    ```

    ````
    **`newrelic.yml` config file for JP**
    ````yml
    security:
        enabled: true
        agent:
            enabled: true
        validator_service_url: wss://csec.jp.nr-data.net
    ```

    ````
    **`newrelic.yml` config file for Fed users**
    ````yml
    security:
        enabled: true
        agent:
            enabled: true
        validator_service_url: wss://csec-gov.nr-data.net
    ```

    ````
5.  Once you've completed all the steps, restart your application and generate traffic against the application's APIs.
6.  Click **See your data** to see an overview of your tested application.

For more detailed instructions, check out these examples demo below.

**How to set up IAST with Java**

See this example demo about how to set up IAST with Java (approx. 2:48 minutes):

[Video](https://fast.wistia.net/embed/iframe/dbipyzuyok)

**How to set up IAST with Node.js**

See this example demo about how to set up IAST with Node.js (approx. 2:49 minutes):

[Video](https://fast.wistia.net/embed/iframe/1m2suxuvuz)