Rapid7 InsightAppSec Reviews

Name: Rapid7 InsightAppSec
Brand: Rapid7
Rating: 4.3 (14 reviews)

4.3 out of 5

14 reviews
100% willing to recommend

133 followers

What is Rapid7 InsightAppSec?

Your web applications may be complex, but your application security testing tool doesn’t need to be. InsightAppSec brings Rapid7’s proven Dynamic Application Security Testing (DAST) technology to the Insight platform, combining powerful application crawling and attack capabilities, flexibility in scan scope and scheduling, and accuracy in results with a modern UI, intuitive workflows, and sensible data organization. This enables you to identify XSS, SQL injection, CSRF, and other vulnerabilities with unparalleled ease. The best part? All of these capabilities are delivered via the cloud so that you’re up and running in minutes to identify the critical security risks that exist in your applications.

Get the Rapid7 InsightAppSec Buyer's Guide and find out what your peers are saying about Rapid7 InsightAppSec, HCL AppScan, Fortify WebInspect and more!

Rapid7 InsightAppSec is the #4 ranked solution in top Dynamic Application Security Testing (DAST) solutions. PeerSpot users give Rapid7 InsightAppSec an average rating of 8.6 out of 10. Rapid7 InsightAppSec is most commonly compared to HCL AppScan: Rapid7 InsightAppSec vs HCL AppScan. Rapid7 InsightAppSec is popular among the large enterprise segment, accounting for 62% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.

Helped 838,713 peers since 2012

Featured reviews

Krzysztof Witko

IT Security Engineer at a financial services firm with 51-200 employees

The previous product, AppSpyder, had a virtual patching module where we could generate patches for third-party web application firewalls, such as Imperva or F5. Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version. Virtual patching could help protect web pages shortly after finishing the scan process.

Read full review

Vikas Dusa

Cyber Security Trainer and Programmer at Freelancer

In Rapid7 InsightAppSec, a distinctive feature is the provision of a CDM for integrating web servers and web applications. To establish the connection between these applications, you only need to paste the provided CDN into your metadata. Once connected, every piece of information, including vulnerabilities, can be accessed. It also offers demo sessions. If there is any malicious network traffic targeting a specific web application, it is designed to detect and showcase the entire scenario. It provides insights into potential vulnerabilities, including issues related to process scripting or content security policy vulnerabilities. Setting up and configuring scans within the tool is easy, and I would rate it a nine out of ten. It provides videos on YouTube, along with documentation that breaks down the process into step-by-step instructions.

Read full review

Nixon Bagalkoti

Cyber Security Lead at a printing company with 201-500 employees

Scanning can be better. When you add new projects for the same product, it either duplicates or replaces the scan configuration. If I run a scan for the same product with a different scan configuration, it should keep the previous scan configuration and not replace it with the new scan configuration. It should just add the new scan configuration. That would be helpful. They do keep the results as it is, but the scan configuration keeps changing. For example, I have set a scan configuration to a full scan, and next week, I want to run a new scan for the same product with some changes or new functionalities. I want to run a partial scan. Currently, if I change the scan configuration to partial, it changes the old one also to partial. That should be improved. They need to work on the user interface and management of all the projects. Their support can also be improved a little. They should also focus on a wider integration scale and end-to-end scanning.

Read full review

Rapid7 InsightAppSec mindshare

As of February 2025, the mindshare of Rapid7 InsightAppSec in the Dynamic Application Security Testing (DAST) category stands at 11.9%, down from 13.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST)

PeerAnalyst reports

Type	Title	Date
Category	Dynamic Application Security Testing (DAST)	Feb 22, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 22, 2025	Download
Comparison	Rapid7 InsightAppSec vs HCL AppScan	Feb 22, 2025	Download
Comparison	Rapid7 InsightAppSec vs Fortify WebInspect	Feb 22, 2025	Download
Comparison	Rapid7 InsightAppSec vs Invicti	Feb 22, 2025	Download

Title	Rating	Mindshare	Recommending
HCL AppScan	3.9	18.3%	83%	43 interviews Add to research
Fortify WebInspect	3.6	26.4%	81%	20 interviews Add to research

Valuable Features

Rapid7 InsightAppSec's most valuable features include easy integration with systems, a user-friendly interface, and comprehensive web scanning. Users appreciate the ability to access common attack templates like OWASP 2017. The platform supports scanning of both internal and external applications with flexible authentication options. It provides alerts and recommendations for vulnerabilities, is stable and scalable, offers automatic authorization, and is easy to deploy. Additionally, its customization options and CDM feature for integrating web servers and applications stand out.

"I rate stability ten out of ten."
"The automatic automation of the automated authorization to the SCANNET environment is valuable."
"Dynamic application security scanning provides predefined templates and supports customization. The ability to scan external and internal applications, including on-premises ones, is precious. Additionally, it is a cloud platform, so we don't need to deploy servers or resources. This makes it time-efficient and cost-effective."

Room for Improvement

Rapid7 InsightAppSec requires enhanced reporting, improved user interface, and better integration with ticketing systems and WAF solutions. Users find the scan configuration management inadequate and desire more static and interactivity analysis. The interface for defining scans can be confusing, and the application monitoring for new programming is lacking. There is a need for SaaS and mobile application scanning and greater flexibility in pricing. More detailed information on vulnerabilities and fewer false positives are also needed.

"Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version."
"Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version."
"The dynamic scanning feature has simplified and improved the security testing process. I suggest adding a SaaS feature to the solution to support scanning SaaS applications, making it more comprehensive.It would be beneficial if the solution could also scan mobile applications. It only scans web applications and should also cover mobile applications, including firmware recommendations."

ROI

Users indicated that Rapid7 InsightAppSec significantly enhanced their application security. They experienced faster vulnerability detection and remediation, improved compliance, and reduced risk exposure. Time savings and streamlined processes led to better resource allocation. Enhanced security oversight and effective threat management contributed to higher confidence in their defense capabilities.

Pricing

Enterprise users describe Rapid7 InsightAppSec's pricing as competitive and affordable, with project-based licensing providing flexibility for team size. Many users lack precise cost details but agree it is cost-effective compared to competitors. A free 60-day trial is available, providing full feature access, including reports and problem-solving capabilities. Prices are often considered reasonable, receiving favorable ratings from users. Some highlight it as a valuable investment, while others acknowledge its expense without specifics.

"Rapid7 InsightAppSec is cheap."
"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."
"I'm not sure how much it costs exactly, but I know it's expensive."

Popular Use Cases

Primary use of Rapid7 InsightAppSec involves vulnerability scanning and security assessments for web applications. Users employ it for dynamic analysis, code scanning, and API integration. It is utilized to test before deployment, automate scans during the development process, and scan endpoints. InsightAppSec identifies faults in running applications and provides insights on missing code configurations. It assists in weekly scanning routines and connects seamlessly with SDLC for automated assessments.

Service and Support

Rapid7 InsightAppSec technical support is often described as helpful and responsive, though some find challenges due to time zone differences and limited communication options. They would benefit from 24/7 phone assistance and faster response times. Users appreciate knowledgeable support staff, typically responding within one or two days. Paying for premium options seems to enhance the quality of support. While many users are satisfied, some express dissatisfaction, noting inadequacies compared to other tools.

Deployment

Users find Rapid7 InsightAppSec's initial setup straightforward and simple. Deployment often requires one or two people and takes around 20 to 30 minutes. Many appreciate the cloud-based nature, making the process quick and accessible. Those involved highlight the ease of following provided documentation and note no extensive maintenance is needed. Initial setup can accommodate both cloud and hybrid environments efficiently, making it accessible even for non-IT personnel.

Scalability

Rapid7 InsightAppSec is highly scalable, with users noting ease in expanding through additional licenses. Being cloud-based, it efficiently handles dynamic scanning needs for medium to large enterprises. Some users experience occasional onboarding challenges and slight delays in data retrieval and scanning. However, its scalability suits diverse organizational needs, enabling them to manage applications efficiently. Users rate its scalability positively, appreciating its adaptability and ease of deployment.

Stability

Rapid7 InsightAppSec is often rated highly in terms of stability by users. Although some experience minor downtime during updates and patches, most find these incidents manageable. Users appreciate communication from Rapid7 regarding scheduled maintenance. Occasional internet connection issues can necessitate rescan, yet no major bugs or glitches are reported. Many emphasize its reliability, with several experiencing no significant challenges for extended periods. Users find the platform's performance commendable and continually improving.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Rapid7 InsightAppSec Buyer's Guide for additional reliable information.