Aikido Security vs Rapid7 InsightAppSec comparison

Aikido Security and Rapid7 are both solutions in the Dynamic Application Security Testing (DAST) category. Aikido Security is ranked #13, while Rapid7 is ranked #5 with an average rating of 7.8. Aikido Security holds a 3.9% mindshare in DAST, compared to Rapid7’s 6.2% mindshare. Additionally, 100% of Aikido Security users are willing to recommend the solution, compared to 94% of Rapid7 users who would recommend it.

Aikido Security

Read 1 Aikido Security review

2,049 Views
225 Comparison Views

100% willing to recommend

Rapid7 InsightAppSec

Read 20 Rapid7 InsightAppSec reviews

1,939 Views
698 Comparison Views

94% willing to recommend

Aikido Security

Rapid7 InsightAppSec

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Aikido Security and Rapid7 InsightAppSec based on real PeerSpot user reviews.

Find out what your peers are saying about Veracode, Checkmarx, OpenText and others in Dynamic Application Security Testing (DAST).

To learn more, read our detailed Dynamic Application Security Testing (DAST) Report (Updated: March 2026).

Buyer's Guide

Dynamic Application Security Testing (DAST)

March 2026

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Aikido Security

Ranking in Dynamic Application Security Testing (DAST)

13th

Average Rating

10.0

Reviews Sentiment

8.3

Number of Reviews

Ranking in other categories

Application Security Tools (31st), Static Application Security Testing (SAST) (25th), Web Application Firewall (WAF) (79th), Container Security (51st), Software Composition Analysis (SCA) (27th), Static Code Analysis (22nd), Cloud Security Posture Management (CSPM) (35th), DevSecOps (19th), Application Security Posture Management (ASPM) (15th)

Rapid7 InsightAppSec

Ranking in Dynamic Application Security Testing (DAST)

5th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

AI Observability (11th)

Mindshare comparison

As of April 2026, in the Dynamic Application Security Testing (DAST) category, the mindshare of Aikido Security is 3.9%, up from 1.2% compared to the previous year. The mindshare of Rapid7 InsightAppSec is 6.2%, up from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Mindshare Distribution
Product	Mindshare (%)
Rapid7 InsightAppSec	6.2%
Aikido Security	3.9%
Other	89.9%

Dynamic Application Security Testing (DAST)

Featured Reviews

Francisco Javier Vergara

SecOps Engineer at IriusRisk

Automated scans have streamlined vulnerability workflows and now provide clear daily risk reports

In my experience, the best feature Aikido Security offers is its ease of use, as it was really easy to onboard our engineers into adopting Aikido Security in their day-to-day lives. The reason onboarding my engineers with Aikido Security was so easy is the user interface. The first thing our engineers see when they log in is a feed of vulnerabilities that their own repositories are affected by, which helps them focus only on their work at hand. I would also like to add that the integrations part is really useful, as all of the integrations we have added so far, mainly Jira, IDE, and API integrations, are really easy to use because they are backed by strong documentation that they maintain daily. This is a commendation to them. Aikido Security has positively impacted our organization by helping us reduce the complexity in managing our vulnerabilities. We now have a single source of truth with Aikido Security, allowing us to get rid of manually maintained automations that we previously had.

Read full review

Shritam Bhowmick

Vulnerability Management Lead at garrett

Provides reliable applications security but needs better integration options

There are areas for improvements regarding false positives. Integration capabilities are lacking, as options for integrations with other tools such as SNOW, Jira, or other integration tools are not sufficient in Rapid7 InsightAppSec. The user interface sometimes has glitches, which may prevent appropriate results during navigation, and even when we get appropriate results, it can be impossible to export them to CSV records or download files. Regarding scalability, Rapid7 InsightAppSec is not a scalable solution for our industry due to limited integration capabilities. Rapid7 relies on another tool called InsightConnect, which requires additional investment, detracting from scalability. Another area that needs improvement is the integration of AI capabilities into the platform. Both Rapid7 InsightAppSec and InsightVM need to advance in that area. In terms of behavioral and pattern recognition, identifying complex attacks such as SQL, blind SQL, JSON, and LDAP injections often results in 94% false positives. This necessitates improvement in their behavioral-based analytics feature.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Since switching to Aikido Security, I have noticed a positive impact on my team's productivity with measurable results, as we now have measurements."

"It uses a signature-based method to check for problems with your code and will provide an alert if anything is found."

"This is a product that I recommend and my advice for anybody who is interested in trying it, there is a free 60-day trial period where they will fix your problems without any payment."

"Relatively speaking, InsightAppSec is good compared to Insight VM."

"It's very easy to use and user-friendly. It does the job."

"The reporting functionality is excellent."

"It is very convenient to get reports from the tool, which offers high-level environmental statistics."

"I would rate the technical support from Rapid7 a ten, indicating high-quality support."

"The automatic automation of the automated authorization to the SCANNET environment is valuable."

More Rapid7 InsightAppSec pros

Cons

"I think Aikido Security could be improved by addressing its Jira integration, which I feel needs a bit of work."

"The interface should be a little bit easier to manage. Sometimes, the logic that they use is kind of strange. They need to work a little bit more on their interface to make it more understandable. The interface is the only problem. I'm using Rapid7, which is very intuitive. There are other applications available in the market with a better interface. They can include more techniques or options to test different types of security because the templates are limited. It would be great to see them follow the MITRE ATT&CK framework or what is there in tools like Veracode and Synopsys."

"We'd like to see integrations with WAF solutions."

"Scanning can be better. When you add new projects for the same product, it either duplicates or replaces the scan configuration."

"The performance can be improved."

"The product’s pricing could be flexible."

"There is room for improvement in the response time of customer service and support levels."

"The reporting is definitely an aspect of the solution that's in need of some work."

"The interface should be a little bit easier to manage. Sometimes, the logic that they use is kind of strange."

More Rapid7 InsightAppSec cons

Pricing and Cost Advice

Information not available

"I'm not sure how much it costs exactly, but I know it's expensive."

"Its price is competitive. It is not expensive."

"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."

"Rapid7 InsightAppSec is cheap."

"The price of this product is very cheap."

"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

12%

Manufacturing Company

10%

Construction Company

10%

Financial Services Firm

Manufacturing Company

13%

Financial Services Firm

12%

Government

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

What needs improvement with Aikido Security?

I think Aikido Security could be improved by addressing its Jira integration, which I feel needs a bit of work. For my preferences, it is a bit too rigid. They recently added the capability of havi...

See all answers

What is your primary use case for Aikido Security?

My main use case for Aikido Security is to utilize it as part of our vulnerability management program, where we also scan our images, codes, and manage our SBOM. A specific example of how I use Aik...

See all answers

What advice do you have for others considering Aikido Security?

Since switching to Aikido Security, I have noticed a positive impact on my team's productivity with measurable results, as we now have measurements. Before, we did not even know how many vulnerabil...

See all answers

What needs improvement with Rapid7 InsightAppSec?

Customers sometimes experience issues with performance. One thing that I recall is that most customers often want to have reporting as per their customized dashboard. This needs to be improved beca...

See all answers

What is your primary use case for Rapid7 InsightAppSec?

I usually recommend this solution for financial institutions. Banks and financial institutions need this solution mostly because they have to follow stringent compliance advisory requirements, so t...

See all answers

What advice do you have for others considering Rapid7 InsightAppSec?

I have not heard any complaints. I do not have any recommendations because customers were initially worried about the number of scans they used to perform, and now it has been enhanced or it will s...

See all answers

Comparisons

SonarQube vs Aikido Security

Compared 11% of the time

Semgrep vs Aikido Security

Compared 8% of the time

Snyk vs Aikido Security

Compared 7% of the time

GitHub vs Aikido Security

Compared 5% of the time

GitHub Advanced Security vs Aikido Security

Compared 5% of the time

More Aikido Security Competitors

Invicti vs Rapid7 InsightAppSec

Compared 13% of the time

PortSwigger Burp Suite Enterprise Edition vs Rapid7 InsightAppSec

Compared 11% of the time

AppCheck vs Rapid7 InsightAppSec

Compared 10% of the time

Veracode vs Rapid7 InsightAppSec

Compared 8% of the time

PortSwigger Burp Suite Professional vs Rapid7 InsightAppSec

Compared 8% of the time

More Rapid7 InsightAppSec Competitors

Product Reports

Buyer's Guide

Static Application Security Testing (SAST)

March 2026

Download Aikido Security product report

Buyer's Guide

Rapid7 InsightAppSec

March 2026

Download Rapid7 InsightAppSec product report

Also Known As

No data available

InsightAppSec

Overview

Aikido Security is the no-nonsense platform that empowers developers by centralizing code-to-cloud security issues and providing rapid guidance for fixing vulnerabilities.

With over 6,000 teams utilizing its features, Aikido Security prioritizes effective security management by consolidating 11 comprehensive scans into one platform. This approach translates complex vulnerabilities into understandable insights, targeting non-enterprise SaaS businesses with engineering teams of 10-500 developers. It focuses on delivering security management without excessive costs or complexity through a product-led growth model.

What are the standout features of Aikido Security?

SAST: Secures code as it is written.
DAST: Monitors surfaces, dynamically tests for vulnerabilities with OWASP ZAP.
IaC: Detects infrastructure vulnerabilities.
CSPM: Real-time detection of cloud infrastructure risks.
Container Scanning: Assesses container environments for risky packages.
Secrets Detection: Identifies exposed API keys, passwords.
Open Source Dependencies: Analyzes dependencies to avoid vulnerabilities.
Open Source License: Maps and exports SBOMs to manage license risks.
Malware Detection: Protects from supply chain attacks.
Runtime Protection: Secures apps with an embedded firewall.
Custom Scans: Integrates with existing tools like SonarQube.

Why should you consider Aikido Security?

Easy Adoption: Setup takes less than 3 minutes with clear UX.
Cost Efficiency: Offers a comprehensive 9-in-1 solution at competitive pricing.
Accurate Results: Best false positive reduction in the market.

In industries like software development and cloud services, Aikido Security is implemented to provide clear insights, enabling teams to focus on rapid product growth while maintaining robust security. Its product-led growth strategy, including a freemium offering, allows developers to experience benefits firsthand without initial investment.

Aikido Security

Your web applications may be complex, but your application security testing tool doesn’t need to be. InsightAppSec brings Rapid7’s proven Dynamic Application Security Testing (DAST) technology to the Insight platform, combining powerful application crawling and attack capabilities, flexibility in scan scope and scheduling, and accuracy in results with a modern UI, intuitive workflows, and sensible data organization. This enables you to identify XSS, SQL injection, CSRF, and other vulnerabilities with unparalleled ease. The best part? All of these capabilities are delivered via the cloud so that you’re up and running in minutes to identify the critical security risks that exist in your applications.

Rapid7

Sample Customers

FinTech GoCardless ZIP CertifID HealthTech Dental Intelligence PE & Group Techstars Cronos Group Security Tech Human Security Tines HR Tech Simployer Recruitee Agency November Five Other Lighthouse (Hospitality Tech) Smokeball (LegalTech) Runna (B2C Tech) GEA Group (Manufacturing) Community fibre (Telecom) n8n (Software Development)

CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace

Buyer's Guide

Dynamic Application Security Testing (DAST)

March 2026

Download Free Report

Find out what your peers are saying about Veracode, Checkmarx, OpenText and others in Dynamic Application Security Testing (DAST). Updated: March 2026.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

See our list of best Dynamic Application Security Testing (DAST) vendors.

We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.