Rapid7 AppSpider Reviews

Name: Rapid7 AppSpider
Brand: Rapid7
Rating: 3.9 (13 reviews)

3.9 out of 5

13 reviews
100% willing to recommend

What is Rapid7 AppSpider?

SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

Get the Rapid7 AppSpider Buyer's Guide and find out what your peers are saying about Rapid7 AppSpider, SonarQube Server (formerly SonarQube), Veracode and more!

Rapid7 AppSpider is the #28 ranked solution in AST tools. PeerSpot users give Rapid7 AppSpider an average rating of 7.8 out of 10. Based on the analysis of the 13 most recent Rapid7 AppSpider reviews, the overall sentiment is positive, with a sentiment score of 6.6. (Among the lowest in the category). Rapid7 AppSpider is most commonly compared to SonarQube Server (formerly SonarQube): Rapid7 AppSpider vs SonarQube Server (formerly SonarQube). Rapid7 AppSpider is popular among the large enterprise segment, accounting for 67% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 16% of all views.

Helped 816,192 peers since 2012

Featured reviews

Andrei Bigdan

Executive Manager at B2B-Solutions LLC

I have had some stability problems but it could be the Microsoft Windows operating system. I found that closing other applications helps with stability. It is helpful to have as much memory as possible, such as eight gigabytes. The more pages being processed the more resources you need. I rate the stability of Rapid7 AppSpider a nine out of ten.

Read full review

Rizwan-Alam

Head Information Security at Akhtar Fuiou Technologies

One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions. This is the main aspect that I hope to see Rapid7 improve on. Beyond reducing false positives, I would also like to see them implement better reporting features, particularly in the executive summary type of reports which need to be user-friendly and easily understood by non-technical people. The recommendations and solutions on these reports could always be improved to make them more relevant, too. Lastly, the stability isn't that great, and sometimes it becomes non-responsive. I feel like the stability of the application is very average and currently needs more work.

Read full review

Agustinus DWIJOKO

Network & Security Engineer at PT. Centrin Online Prima

The initial setup is straightforward, and it takes a couple of minutes. It's quite easy, you just need to put in the key, and then you can progress with installing the scan engine. Moreover, you're not only limited to the cloud, but you have the option to install a local scan engine. So we have both on-prem and cloud-based versions with our customers. When it comes to maintenance, at least two people are needed. One person to conduct scans and an additional person to monitor the end-to-end process. After conducting scans, the results are sent to the developer for analysis and discussion. It is possible for different interpretations of the scan results to occur, which can lead to varying outcomes. This aspect of technical analytics is a separate segment from the maintenance process. The maintenance team typically consists of administrators.

Read full review

Rapid7 AppSpider mindshare

As of November 2024, the mindshare of Rapid7 AppSpider in the Static Application Security Testing (SAST) category stands at 0.5%, down from 0.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

Rapid7 AppSpider's most valuable features include quick vulnerability detection and comprehensive reporting compliant with international standards. Reports display compliance with PCA/GDPR, include remediation links, and integrate with development tools like Jira. Users appreciate its user-friendly dashboard for scanning web apps, automated login with selenium integration, low false-positive rate, and the ability to handle replay attacks. Its graphical reports are easy to interpret, enhancing data mining capabilities for efficient risk management in web applications.

"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."
"It scans all the components developed within a web application."
"What I like most about AppSpider is that it's easy to use and its automated scan gives me all the details I need to know when it comes to vulnerabilities and their solutions."

Room for Improvement

Rapid7 AppSpider needs improvements in scanning speed and stability. Its interface and dashboard require enhancement for better usability, and integration capabilities, especially with mobile apps, need to be expanded. The system often has false positives and the executive reports could be more user-friendly. Customer support response times are slow and documentation is lacking clarity. Performance issues during scans, particularly with RAM consumption, and the need for better customization options, are also concerns.

"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."
"It needs better integration with mobile applications."
"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."

Pricing

Rapid7 AppSpider pricing is considered expensive for Enterprise versions that scan multiple applications. Pricing largely depends on user count and application coverage. There are two pricing methods: scanning unlimited critical applications or unlimited websites quarterly. It costs approximately 9,000 annually, with potential for negotiation on usage terms. As a closed-source, cloud-based solution, no hardware costs are involved, only service costs. Users find the price average compared to other vendors, rating it five out of ten.

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."
"AppSpider is closed-source software and you need to acquire a license in order to use it."
"The licensing cost depends on the number of users."

Popular Use Cases

Rapid7 AppSpider is primarily used for web application security testing and compliance control. Organizations utilize it for vulnerability assessment, scanning web applications and APIs, and ensuring compliance with standards like ISO27001. It performs numerous checks on web applications, producing reports on vulnerabilities. Some users deploy it on-premises due to regulatory requirements and integrate it within vulnerability and change management processes. Others use it for auditing, data mining, and market manipulation detection.

Service and Support

Rapid7 AppSpider customer service and support receive positive feedback for being responsive and helpful, with good response times and segmented teams handling different aspects. While many have not needed direct support, those who have generally report satisfaction. However, some experience unresolved issues, like a significant tech company in Indonesia facing upgrade challenges. Despite this, a score of eight out of ten reflects a generally strong experience with the support team.

Deployment

Rapid7 AppSpider's initial setup is generally straightforward. Users mention that installation is simple on a Windows machine, requiring merely downloading and following prompts. Deployment can vary, taking from 20 minutes to a week, with some network challenges possible. While the process is easy, expertise is recommended for specific configurations, especially when dealing with authentication or cloud versions. Maintenance typically requires two people, with attention given to both on-prem and cloud-based installations.

Scalability

Rapid7 AppSpider is recognized as scalable, with multiple users highlighting its robust design for scalability. Organizations report successful scalability tests, enabling distribution installation and multiple engine use via a single dashboard. Clients, primarily mid-sized businesses, find no issues scaling AppSpider. Although seen by some as more of a utility, many rate its scalability favorably. There are mixed insights on future scalability needs, but currently, users execute concurrent scans efficiently without issues.

Stability

Rapid7 AppSpider's stability is generally considered good, with many finding it very stable and reliant on its internal data management. Some report it occasionally becomes non-responsive, giving it mixed ratings. It is suggested to configure properly and manage resources, like memory, to enhance performance. While some experience no major issues and rate it highly, others note that not testing under high usage makes their assessment less definitive. Opinions vary from average to highly stable.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Rapid7 AppSpider Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

16%

Government

Healthcare Company

Manufacturing Company

Educational Organization

Insurance Company

Energy/Utilities Company

Retailer

Real Estate/Law Firm

University

Wholesaler/Distributor

Construction Company

Logistics Company

Transportation Company

Hospitality Company

Media Company

Comms Service Provider

Performing Arts

Non Profit

Outsourcing Company

Recreational Facilities/Services Company

Recruiting/Hr Firm

Aerospace/Defense Firm

Compare Rapid7 AppSpider with alternative products

Learn more about Rapid7 AppSpider

Our dynamic application security testing (DAST) solution crawls to the deepest, darkest corners of even the most modern and complex apps to effectively test for risk and get you the insight you need to remediate faster. With AppSpider on your side (or, rather, all of your sides), you’ll be able to scan all the apps today and always be ready for whatever comes next.

Rapid7 AppSpider was previously known as AppSpider.