Rapid7 AppSpider Reviews

Name: Rapid7 AppSpider
Brand: Rapid7
Rating: 3.9 (14 reviews)

3.9 out of 5

14 reviews
100% willing to recommend

What is Rapid7 AppSpider?

SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

Get the Rapid7 AppSpider Buyer's Guide and find out what your peers are saying about Rapid7 AppSpider, SonarQube Server (formerly SonarQube), Checkmarx One and more!

Rapid7 AppSpider is the #27 ranked solution in AST tools. PeerSpot users give Rapid7 AppSpider an average rating of 7.8 out of 10. Rapid7 AppSpider is most commonly compared to SonarQube Server (formerly SonarQube): Rapid7 AppSpider vs SonarQube Server (formerly SonarQube). Rapid7 AppSpider is popular among the large enterprise segment, accounting for 70% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 17% of all views.

Helped 849,190 peers since 2012

Featured Rapid7 AppSpider reviews

Andrei Bigdan

Executive Manager at B2B-Solutions LLC

I have had some stability problems but it could be the Microsoft Windows operating system. I found that closing other applications helps with stability. It is helpful to have as much memory as possible, such as eight gigabytes. The more pages being processed the more resources you need. I rate the stability of Rapid7 AppSpider a nine out of ten.

Read full review

Rizwan-Alam

Head Information Security at Akhtar Fuiou Technologies

One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions. This is the main aspect that I hope to see Rapid7 improve on. Beyond reducing false positives, I would also like to see them implement better reporting features, particularly in the executive summary type of reports which need to be user-friendly and easily understood by non-technical people. The recommendations and solutions on these reports could always be improved to make them more relevant, too. Lastly, the stability isn't that great, and sometimes it becomes non-responsive. I feel like the stability of the application is very average and currently needs more work.

Read full review

Agustinus DWIJOKO

Network & Security Engineer at PT. Centrin Online Prima

The initial setup is straightforward, and it takes a couple of minutes. It's quite easy, you just need to put in the key, and then you can progress with installing the scan engine. Moreover, you're not only limited to the cloud, but you have the option to install a local scan engine. So we have both on-prem and cloud-based versions with our customers. When it comes to maintenance, at least two people are needed. One person to conduct scans and an additional person to monitor the end-to-end process. After conducting scans, the results are sent to the developer for analysis and discussion. It is possible for different interpretations of the scan results to occur, which can lead to varying outcomes. This aspect of technical analytics is a separate segment from the maintenance process. The maintenance team typically consists of administrators.

Read full review

Rapid7 AppSpider mindshare

As of April 2025, the mindshare of Rapid7 AppSpider in the Static Application Security Testing (SAST) category stands at 0.5%, down from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

PeerResearch reports based on Rapid7 AppSpider reviews

Type	Title	Date
Category	Static Application Security Testing (SAST)	Apr 26, 2025	Download
Product	Reviews, tips, and advice from real users	Apr 26, 2025	Download
Comparison	Rapid7 AppSpider vs SonarQube Server (formerly SonarQube)	Apr 26, 2025	Download
Comparison	Rapid7 AppSpider vs Veracode	Apr 26, 2025	Download
Comparison	Rapid7 AppSpider vs Checkmarx One	Apr 26, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	26.7%	81%	114 interviews Add to research
Checkmarx One	3.8	10.6%	87%	70 interviews Add to research

Valuable Features

Rapid7 AppSpider excels in vulnerability detection, comprehensive reporting, and efficient data mining. Its reports adhere to international standards and are versatile, covering PCA/GDPR compliance. It supports integration with software development cycles and app management through applets. Users benefit from an intuitive interface and low false positive rates. The platform's replay attack capability, authentication identification, and interactive features make it user-friendly and adaptable to diverse needs. Rapid7 AppSpider's portability and lightness enhance convenience.

"The solution is highly stable, rated at ten out of ten."
"One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization."
"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."

Room for Improvement

Rapid7 AppSpider needs faster performance and improved stability with reduced false positives. Better integration options are essential, particularly for mobile applications and CSED, with clearer, more comprehensive documentation. The interface requires enhancements for customization, and support response times should be quicker. Reporting features need to be more user-friendly for non-technical audiences. Additionally, Japanese localization is necessary, and the ability to scan multiple applications simultaneously is needed.

"For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users."
"The product should offer a GUI in Japanese and provide Japanese reports for end-users."
"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."

Pricing

Enterprise users of Rapid7 AppSpider report varied pricing experiences. The cost is considered expensive for the Enterprise version with capabilities to scan multiple applications simultaneously. Pricing varies based on user count, with costs rated average compared to competitors. Licenses are required, as AppSpider is not open-source, though purchase negotiations can yield better deals. While cloud-based with no hardware costs, additional service fees may arise. International users might face added localization expenses.

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."
"AppSpider is closed-source software and you need to acquire a license in order to use it."
"The licensing cost depends on the number of users."

Popular Use Cases

Rapid7 AppSpider is employed for web application security testing, scanning for vulnerabilities, and compliance control. Organizations utilize it to adhere to regulatory standards like ISO27001, ensuring data security by keeping applications on-premises. AppSpider aids in auditing, application API examination, and dynamic scanning, generating detailed vulnerability reports. It is frequently used in sectors requiring security assessments such as FinTech and banking. Distributors also implement it for their clientele.

Service and Support

Rapid7 AppSpider's customer service and support are generally rated positively, with a responsive and helpful team. Users find the technical support good, often solved through online contact for unresolved issues. Some users rely on internal resources for assistance. There have been instances of unresolved issues with Nexpose, causing customer dissatisfaction. Multiple teams are engaged depending on the issue, displaying specialization in support tasks. Overall, support is frequently rated eight out of ten.

Deployment

Rapid7 AppSpider's initial setup is generally straightforward and simple. Users find it easy to implement, especially when deploying on a Windows machine. Network issues might prolong the process. Integration takes longer than setup, and a couple of people are usually needed for maintenance. While deploying on a laptop offers flexibility, expertise is still needed for authentication, exploring advanced features, and handling conflicts with other services.

Scalability

Rapid7 AppSpider demonstrates strong scalability, with positive feedback on its ability to handle multiple engines and concurrent scans. Many users find it quite adaptable, rating it highly, although some mention it functions more as a utility than a standalone tool. Its SaaS nature adds scalability advantages, while some critics suggest alternatives might eventually be needed for more robust performance. Users generally appreciate its ease of distribution and centralized dashboard features.

Stability

Rapid7 AppSpider's stability is generally rated positively by users. Many find it very stable, attributing its reliability to strong internal data management and reporting capabilities. However, some note scalability issues with large networks and occasional responsiveness problems. Proper configuration and adequate resources are recommended for optimal performance. Ratings range from five to ten out of ten, with some users experiencing minor stability issues potentially related to specific IT environments or resource allocation.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Rapid7 AppSpider Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

14%

Healthcare Company

Government

Manufacturing Company

Educational Organization

Retailer

University

Real Estate/Law Firm

Energy/Utilities Company

Insurance Company

Wholesaler/Distributor

Comms Service Provider

Construction Company

Non Profit

Transportation Company

Hospitality Company

Logistics Company

Performing Arts

Leisure / Travel Company

Media Company

Outsourcing Company

Recreational Facilities/Services Company

Sports Company

Aerospace/Defense Firm

Compare Rapid7 AppSpider with alternative products

Learn more about Rapid7 AppSpider

Our dynamic application security testing (DAST) solution crawls to the deepest, darkest corners of even the most modern and complex apps to effectively test for risk and get you the insight you need to remediate faster. With AppSpider on your side (or, rather, all of your sides), you’ll be able to scan all the apps today and always be ready for whatever comes next.

Rapid7 AppSpider was previously known as AppSpider.