Try our new research platform with insights from 80,000+ expert users

CucumberStudio vs Rapid7 InsightAppSec comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CucumberStudio
Ranking in Dynamic Application Security Testing (DAST)
7th
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Rapid Application Development Software (28th)
Rapid7 InsightAppSec
Ranking in Dynamic Application Security Testing (DAST)
4th
Average Rating
8.2
Reviews Sentiment
7.7
Number of Reviews
17
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of CucumberStudio is 0.6%, up from 0.1% compared to the previous year. The mindshare of Rapid7 InsightAppSec is 12.2%, down from 13.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Dynamic Application Security Testing (DAST)
 

Featured Reviews

Walter Wirch - PeerSpot reviewer
Facilitates integration of test scenarios while needing modernization of components
CucumberStudio is primarily used for designing test scenarios and automating testing. We have implemented it in conjunction with our own routines for integration into our infrastructure CucumberStudio aligns with our strategy for data-driven testing. It supports our product owners in designing…
Krzysztof Witko - PeerSpot reviewer
Automated authorization streamlines security processes
The previous product, AppSpyder, had a virtual patching module where we could generate patches for third-party web application firewalls, such as Imperva or F5. Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version. Virtual patching could help protect web pages shortly after finishing the scan process.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The data table that helps in converting a single script to multiple test cases is very helpful."
"The URL is very useful, and it has a very good UI for deploying information of the scenarios created."
"CucumberStudio aligns with our strategy for data-driven testing."
"The solution is stable."
"The best thing is that a person without knowledge about the program can easily understand what happened in our testing process."
"CucumberStudio has a very user-friendly interface."
"CucumberStudio aligns with our strategy for data-driven testing."
"Relatively speaking, InsightAppSec is good compared to Insight VM."
"Relatively speaking, InsightAppSec is good compared to Insight VM."
"I would rate the technical support from Rapid7 a ten, indicating high-quality support."
"When considering DAST, it is not attributed to a singular feature but rather the capabilities of the engine that provides a genuine penetration testing experience and delivers insightful reports."
"Rapid7 InsightAppSec helps us in both regulatory compliance and in strengthening our security posture."
"It is a very robust solution."
"The automatic automation of the automated authorization to the SCANNET environment is valuable."
"The most valuable feature of this solution is the graphical interface."
 

Cons

"The reporting needs to be improved."
"I would like to see better customer support."
"A key area for improvement is to revamp outdated components such as HipTest publisher."
"Another kind of deployment might be useful, perhaps an option to install the tool in a local deployment."
"A key area for improvement is to revamp outdated components such as HipTest publisher."
"I think it would be better if we could also do the reporting with CucumberStudio."
"Rapid7 InsightAppSec needs improvement in detecting phishing pages."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."
"In the future, if they can have integration with a lot of ticketing systems then it would be amazing."
"We'd like to see integrations with WAF solutions."
"When you add new projects for the same product, it either duplicates or replaces the scan configuration. If I run a scan for the same product with a different scan configuration, it should keep the previous scan configuration and not replace it with the new scan configuration. It should just add the new scan configuration. That would be helpful. They do keep the results as it is, but the scan configuration keeps changing. For example, I have set a scan configuration to a full scan, and next week, I want to run a new scan for the same product with some changes or new functionalities. I want to run a partial scan. Currently, if I change the scan configuration to partial, it changes the old one also to partial. That should be improved."
"Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version."
"The interface should be a little bit easier to manage. Sometimes, the logic that they use is kind of strange. They need to work a little bit more on their interface to make it more understandable. The interface is the only problem. I'm using Rapid7, which is very intuitive. There are other applications available in the market with a better interface. They can include more techniques or options to test different types of security because the templates are limited. It would be great to see them follow the MITRE ATT&CK framework or what is there in tools like Veracode and Synopsys."
 

Pricing and Cost Advice

Information not available
"I'm not sure how much it costs exactly, but I know it's expensive."
"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."
"The price of this product is very cheap."
"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."
"Rapid7 InsightAppSec is cheap."
"Its price is competitive. It is not expensive."
report
Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
12%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Hiptest?
The best thing is that a person without knowledge about the program can easily understand what happened in our testing process.
What needs improvement with Hiptest?
A key area for improvement is to revamp outdated components such as HipTest publisher. Introducing modern technology could improve the platform. API-based solutions are present but could benefit fr...
What is your primary use case for Hiptest?
CucumberStudio is primarily used for designing test scenarios and automating testing. We have implemented it in conjunction with our own routines for integration into our infrastructure.
What do you like most about Rapid7 InsightAppSec?
In Rapid7 InsightAppSec, a distinctive feature is the provision of a CDM for integrating web servers and web applications. To establish the connection between these applications, you only need to p...
What needs improvement with Rapid7 InsightAppSec?
The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports. It would be beneficial if there were an option for customers to customize reports to include ...
What is your primary use case for Rapid7 InsightAppSec?
We primarily use Rapid7 InsightAppSec for application security within our organization. We perform penetration testing on our in-house-built, Java-based web applications to comply with regulatory s...
 

Also Known As

Hiptest
InsightAppSec
 

Overview

 

Sample Customers

Cisco, Cardinal Health, Intuit, Smartbox, Accenture, Deliveroo
CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace
Find out what your peers are saying about CucumberStudio vs. Rapid7 InsightAppSec and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.