PortSwigger Burp Suite Enterprise Edition vs Rapid7 InsightAppSec comparison

PortSwigger Burp Suite Enterprise Edition vs. Rapid7 InsightAppSec

Download the complete report

Helped 814,572 peers since 2012

Categories and Ranking

PortSwigger Burp Suite Ente...

Ranking in Dynamic Application Security Testing (DAST)

5th

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Vulnerability Management (21st)

Rapid7 InsightAppSec

Ranking in Dynamic Application Security Testing (DAST)

4th

Average Rating

8.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Iwegbue Godspower Isioma

Cyber Security Analyst at Platview Technologies

Nov 20, 2023

A seamless and easy-to-use solution that enables organizations to conduct vulnerability assessments and penetration testing

We use the solution for vulnerability assessment and penetration testing. We can escalate vulnerabilities. We can also use it for mobile app traffic detection and SQL injection We can escalate the vulnerabilities we see on the web application. The product is easy to use. It is seamless and easy…

Read full review

Vikas Dusa

Cyber Security Trainer and Programmer at Freelancer

Mar 4, 2024

Helps to check multiple websites, particularly dynamic and e-commerce websites, for vulnerabilities within the code

In Rapid7 InsightAppSec, a distinctive feature is the provision of a CDM for integrating web servers and web applications. To establish the connection between these applications, you only need to paste the provided CDN into your metadata. Once connected, every piece of information, including vulnerabilities, can be accessed. It also offers demo sessions. If there is any malicious network traffic targeting a specific web application, it is designed to detect and showcase the entire scenario. It provides insights into potential vulnerabilities, including issues related to process scripting or content security policy vulnerabilities. Setting up and configuring scans within the tool is easy, and I would rate it a nine out of ten. It provides videos on YouTube, along with documentation that breaks down the process into step-by-step instructions.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's extensions really expand the capabilities and features offered by the installation."

"Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition."

"The most valuable part of it was probably the ability to intercept and modify calls."

"The tool is loaded with many features that give us ROI."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The most valuable features of PortSwigger Burp Suite Enterprise Edition are the vast amount of options and ease of use. They frequently improve the solution every six months to a year. Additionally, if we want any more features we can upload a custom script to meet our needs."

"The product is easy to use."

"The product's initial setup phase was super easy."

More PortSwigger Burp Suite Enterprise Edition pros

"It is a very robust solution."

"You have various attack modules, and you also have the Attack Replay feature for the attack sequence. You can reproduce an attack and see it. That is a very good feature I noticed in this solution. It helps developers as well."

"It uses a signature-based method to check for problems with your code and will provide an alert if anything is found."

"It is very convenient to get reports from the tool, which offers high-level environmental statistics."

"In Rapid7 InsightAppSec, a distinctive feature is the provision of a CDM for integrating web servers and web applications. To establish the connection between these applications, you only need to paste the provided CDN into your metadata. Once connected, every piece of information, including vulnerabilities, can be accessed. It also offers demo sessions."

"Dynamic application security scanning provides predefined templates and supports customization. The ability to scan external and internal applications, including on-premises ones, is precious. Additionally, it is a cloud platform, so we don't need to deploy servers or resources. This makes it time-efficient and cost-effective."

"The most valuable feature of this solution is the graphical interface."

"The solution is stable."

More Rapid7 InsightAppSec pros

Cons

"It would be better if the solution is cloud-based."

"The cost per license per user could be cheaper, specifically for individual licensing."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

"The stability of the scans could be improved."

"There are features or functionality missing, but PortSwigger Burp Suite Enterprise Edition does try to update frequently to alleviate the shortcomings."

"From my personal experience, the solution's performance could be improved."

"The implementation of the solution is quite complicated and could be easier."

"The product needs to have the ability to evaluate more."

More PortSwigger Burp Suite Enterprise Edition cons

"The number of web applications we can scan is limited."

"When you add new projects for the same product, it either duplicates or replaces the scan configuration. If I run a scan for the same product with a different scan configuration, it should keep the previous scan configuration and not replace it with the new scan configuration. It should just add the new scan configuration. That would be helpful. They do keep the results as it is, but the scan configuration keeps changing. For example, I have set a scan configuration to a full scan, and next week, I want to run a new scan for the same product with some changes or new functionalities. I want to run a partial scan. Currently, if I change the scan configuration to partial, it changes the old one also to partial. That should be improved."

"The product’s pricing could be flexible."

"I would like more details of what the product can do."

"In the future, if they can have integration with a lot of ticketing systems then it would be amazing."

"The interface should be a little bit easier to manage. Sometimes, the logic that they use is kind of strange. They need to work a little bit more on their interface to make it more understandable. The interface is the only problem. I'm using Rapid7, which is very intuitive. There are other applications available in the market with a better interface. They can include more techniques or options to test different types of security because the templates are limited. It would be great to see them follow the MITRE ATT&CK framework or what is there in tools like Veracode and Synopsys."

"We'd like to see integrations with WAF solutions."

"The dynamic scanning feature has simplified and improved the security testing process. I suggest adding a SaaS feature to the solution to support scanning SaaS applications, making it more comprehensive. It would be beneficial if the solution could also scan mobile applications. It only scans web applications and should also cover mobile applications, including firmware recommendations."

More Rapid7 InsightAppSec cons

Pricing and Cost Advice

"The tool's pricing is reasonable and costs around 400 dollars per year."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"For Professional, it's about $400 per year."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"The price of this product is very cheap."

"I'm not sure how much it costs exactly, but I know it's expensive."

"Rapid7 InsightAppSec is cheap."

"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."

"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."

"Its price is competitive. It is not expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

814,572 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

15%

Government

11%

Manufacturing Company

Computer Software Company

21%

Financial Services Firm

13%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PortSwigger Burp Suite Enterprise Edition?

Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition.

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

The tool's pricing is reasonable and costs around 400 dollars per year.

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers.

What do you like most about Rapid7 InsightAppSec?

What needs improvement with Rapid7 InsightAppSec?

The dynamic scanning feature has simplified and improved the security testing process. I suggest adding a SaaS feature to the solution to support scanning SaaS applications, making it more comprehe...

What is your primary use case for Rapid7 InsightAppSec?

We use Rapid7 InsightAppSec for dynamic application security scanning. We scan our web applications to identify vulnerabilities and then address the issues based on the report. It is a task solutio...

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Comparisons

Compared 37% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 13% of the time

Fortify WebInspect vs PortSwigger Burp Suite Enterprise Edition

Compared 8% of the time

Tenable Vulnerability Management vs PortSwigger Burp Suite Enterprise Edition

Compared 6% of the time

Pentera vs PortSwigger Burp Suite Enterprise Edition

Compared 4% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Rapid7 AppSpider vs Rapid7 InsightAppSec

Compared 31% of the time

PortSwigger Burp Suite Professional vs Rapid7 InsightAppSec

Compared 15% of the time

OWASP Zap vs Rapid7 InsightAppSec

Compared 13% of the time

Acunetix vs Rapid7 InsightAppSec

Compared 11% of the time

Veracode vs Rapid7 InsightAppSec

Compared 3% of the time

More Rapid7 InsightAppSec Competitors

Product Reports

PortSwigger Burp Suite Enterprise Edition

Download PortSwigger Burp Suite Enterprise Edition product report

PortSwigger Burp Suite Enterprise Edition report

Rapid7 InsightAppSec

Download Rapid7 InsightAppSec product report

Also Known As

No data available

InsightAppSec

Learn More

PortSwigger

Rapid7

Overview

Burp Suite Enterprise Edition is an automated web vulnerability scanner, designed to enable enterprises to scale security across their web portfolios and achieve DevSecOps. Automate trusted Burp scans, integrate web security testing with development, and free your application security to support software development.

Your web applications may be complex, but your application security testing tool doesn’t need to be. InsightAppSec brings Rapid7’s proven Dynamic Application Security Testing (DAST) technology to the Insight platform, combining powerful application crawling and attack capabilities, flexibility in scan scope and scheduling, and accuracy in results with a modern UI, intuitive workflows, and sensible data organization. This enables you to identify XSS, SQL injection, CSRF, and other vulnerabilities with unparalleled ease. The best part? All of these capabilities are delivered via the cloud so that you’re up and running in minutes to identify the critical security risks that exist in your applications.

Sample Customers

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace

PortSwigger Burp Suite Enterprise Edition vs. Rapid7 InsightAppSec