Rapid7 InsightAppSec Reviews

Name: Rapid7 InsightAppSec
Brand: Rapid7
Rating: 4.1 (18 reviews)

Vendor: Rapid7

4.1 out of 5

18 reviews
94% willing to recommend

119 followers

Start review

What is Rapid7 InsightAppSec?

Your web applications may be complex, but your application security testing tool doesn’t need to be. InsightAppSec brings Rapid7’s proven Dynamic Application Security Testing (DAST) technology to the Insight platform, combining powerful application crawling and attack capabilities, flexibility in scan scope and scheduling, and accuracy in results with a modern UI, intuitive workflows, and sensible data organization. This enables you to identify XSS, SQL injection, CSRF, and other vulnerabilities with unparalleled ease. The best part? All of these capabilities are delivered via the cloud so that you’re up and running in minutes to identify the critical security risks that exist in your applications.

Get the Rapid7 InsightAppSec Buyer's Guide and find out what your peers are saying about Rapid7 InsightAppSec, HCL AppScan, Fortify WebInspect and more!

Rapid7 InsightAppSec is the #4 ranked solution in top Dynamic Application Security Testing (DAST) solutions. PeerSpot users give Rapid7 InsightAppSec an average rating of 8.2 out of 10. Rapid7 InsightAppSec is most commonly compared to HCL AppScan: Rapid7 InsightAppSec vs HCL AppScan. Rapid7 InsightAppSec is popular among the large enterprise segment, accounting for 59% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Helped 849,686 peers since 2012

Featured Rapid7 InsightAppSec reviews

Krzysztof Witko

IT Security Engineer at a financial services firm with 51-200 employees

The previous product, AppSpyder, had a virtual patching module where we could generate patches for third-party web application firewalls, such as Imperva or F5. Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version. Virtual patching could help protect web pages shortly after finishing the scan process.

Read full review

Vikas Dusa

Cyber Security Trainer and Programmer at Freelancer

In Rapid7 InsightAppSec, a distinctive feature is the provision of a CDM for integrating web servers and web applications. To establish the connection between these applications, you only need to paste the provided CDN into your metadata. Once connected, every piece of information, including vulnerabilities, can be accessed. It also offers demo sessions. If there is any malicious network traffic targeting a specific web application, it is designed to detect and showcase the entire scenario. It provides insights into potential vulnerabilities, including issues related to process scripting or content security policy vulnerabilities. Setting up and configuring scans within the tool is easy, and I would rate it a nine out of ten. It provides videos on YouTube, along with documentation that breaks down the process into step-by-step instructions.

Read full review

SonNguyen3

Technical Manager at a computer software company with 11-50 employees

I use Rapid7 InsightAppSec for dynamic application security testing. My main focus is on the quality of detection, specifically detecting vulnerabilities correctly. I also use it to provide neat reports, which my security team can use for validation. These reports are user-friendly, allowing us to…

Read full review

Rapid7 InsightAppSec mindshare

As of May 2025, the mindshare of Rapid7 InsightAppSec in the Dynamic Application Security Testing (DAST) category stands at 12.0%, down from 13.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST)

PeerResearch reports based on Rapid7 InsightAppSec reviews

Type	Title	Date
Category	Dynamic Application Security Testing (DAST)	May 1, 2025	Download
Product	Reviews, tips, and advice from real users	May 1, 2025	Download
Comparison	Rapid7 InsightAppSec vs HCL AppScan	May 1, 2025	Download
Comparison	Rapid7 InsightAppSec vs Fortify WebInspect	May 1, 2025	Download
Comparison	Rapid7 InsightAppSec vs Invicti	May 1, 2025	Download

Title	Rating	Mindshare	Recommending
HCL AppScan	3.9	15.3%	83%	43 interviews Add to research
Fortify WebInspect	3.6	22.6%	82%	21 interviews Add to research

Valuable Features

Rapid7 InsightAppSec offers versatile integration, robust user interface, and dynamic scanning capabilities. Users highlight its seamless system integration, user-friendly design, and customizable web scanning. The common templates align with industry standards and support internal-external application scans including cloud-based setups. InsightAppSec's automated processes and comprehensive vulnerability insights, including the Attack Replay feature and CDN provision, stand out. These aspects, alongside insightful reports and effective remediation recommendations, make it indispensable for maintaining secure environments.

"I would rate the technical support from Rapid7 a ten, indicating high-quality support."
"Rapid7 InsightAppSec helps us in both regulatory compliance and in strengthening our security posture."
"When considering DAST, it is not attributed to a singular feature but rather the capabilities of the engine that provides a genuine penetration testing experience and delivers insightful reports."

Room for Improvement

Rapid7 InsightAppSec requires more detailed information about its capabilities and improved reporting features with customizable options. Users find the interface for configuring scans and targets confusing, and scanning configurations can unintentionally overwrite previous settings. Integration with ticketing systems and Web Application Firewalls is needed. The platform should expand static and interactive analysis, detect phishing pages better, and support mobile app scanning. Performance enhancement, pricing flexibility, and better customer support are also areas that need attention.

"There is room for improvement in Rapid7 InsightAppSec by giving clients the ability for extra columns on reports and enabling the extraction of remediation reports into a CSV format. Currently, the PDF format is cumbersome to go through when dealing with thousands of pages."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."

ROI

Users indicated that Rapid7 InsightAppSec significantly enhanced their application security. They experienced faster vulnerability detection and remediation, improved compliance, and reduced risk exposure. Time savings and streamlined processes led to better resource allocation. Enhanced security oversight and effective threat management contributed to higher confidence in their defense capabilities.

Pricing

Enterprise buyers evaluating Rapid7 InsightAppSec find its pricing competitive, with some considering it affordable and worth the investment. Many users appreciate the flexibility of project-based licensing, allowing for unlimited users. While some find the cost on par with competitors, others seek potential discounts. A trial version is available for 60 days, offering free reports and problem fixes. Opinions on the cost vary, with some rating it highly and others finding it expensive.

"Rapid7 InsightAppSec is cheap."
"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."
"I'm not sure how much it costs exactly, but I know it's expensive."

Popular Use Cases

Rapid7 InsightAppSec is used for vulnerability scanning, security assessments on web applications, and dynamic application security testing. It aids in API integration, penetration testing, and discovering code vulnerabilities. Organizations utilize it for web application scanning, results analysis, and compliance assurance. It seamlessly integrates into development processes and supports weekly scans of applications, providing detailed insights into security issues for enterprise and customer environments.

Service and Support

Rapid7 InsightAppSec's customer service is generally considered helpful and knowledgeable. Users report responsive technical support, with some noting the lack of a phone option. Though most support is US-based, which can be challenging for global users, others find it prompt and effective. Some feel response times could improve, especially for urgent issues. Location-specific experiences, such as in Dubai, are mostly positive, but a faster response and more accessible communication are desired by several users.

Deployment

Rapid7 InsightAppSec's initial setup is often described as straightforward and easy. Many users found the deployment quick, taking as little as 20 to 30 minutes with minimal personnel. As a cloud-based platform, the setup process is simplified and requires creating an account, which is largely unobtrusive. With straightforward documentation, most users conclude that InsightAppSec offers an uncomplicated initial experience, although some mention complexity with API configurations.

Scalability

Rapid7 InsightAppSec is highly scalable, benefiting from cloud capabilities that ease the expansion process. Users can quickly purchase additional licenses to support growth. While onboarding may present occasional delays, using it is straightforward for both external and internal scanning. With flexible deployment, it effectively caters to medium and large enterprises, facilitating gradual usage upgrades. Although scanning times for websites can be lengthy, the scalability aspect is user-friendly, earning high ratings for ease of deployment and scalability.

Stability

Rapid7 InsightAppSec is generally stable. Users face few issues, typically linked to occasional internet disruptions requiring re-scans or reconfiguration. It's reliable, with no significant bugs or crashes, and downtime is rare, primarily during scheduled maintenance. Notifications are sent for planned outages. Ratings vary between six and ten out of ten, with most praising its reliability. Some mention minor challenges like extended data fetching times, but improvements and added features are frequently noted.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Rapid7 InsightAppSec Buyer's Guide for additional reliable information.