CloudCheckr vs Rapid7 InsightAppSec comparison

Spot - A Flexera company and Rapid7 are both solutions in the AI Observability category. Spot - A Flexera company is ranked #19 with an average rating of 8.0, while Rapid7 is ranked #23 with an average rating of 7.5. Spot - A Flexera company holds a 0.6% mindshare in AO, compared to Rapid7’s 0.6% mindshare. Additionally, 83% of Spot - A Flexera company users are willing to recommend the solution, compared to 94% of Rapid7 users who would recommend it.

CloudCheckr

Read 13 CloudCheckr reviews

5,210 Views
625 Comparison Views

83% willing to recommend

Rapid7 InsightAppSec

Read 20 Rapid7 InsightAppSec reviews

3,288 Views
723 Comparison Views

94% willing to recommend

CloudCheckr

Rapid7 InsightAppSec

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CloudCheckr and Rapid7 InsightAppSec based on real PeerSpot user reviews.

Find out in this report how the two AI Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CloudCheckr vs. Rapid7 InsightAppSec Report (Updated: June 2026).

Buyer's Guide

CloudCheckr vs. Rapid7 InsightAppSec

June 2026

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CloudCheckr

Ranking in AI Observability

19th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Cloud Management (9th), Cloud Cost Management (9th), Managed Cloud Services (5th)

Rapid7 InsightAppSec

Ranking in AI Observability

23rd

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (5th)

Mindshare comparison

As of August 2026, in the AI Observability category, the mindshare of CloudCheckr is 0.6%, up from 0.1% compared to the previous year. The mindshare of Rapid7 InsightAppSec is 0.6%. It is calculated based on PeerSpot user engagement data.

AI Observability Mindshare Distribution
Product	Mindshare (%)
CloudCheckr	0.6%
Rapid7 InsightAppSec	0.6%
Other	98.8%

AI Observability

Featured Reviews

AbhishekGupta2

Sr PreSales Cloud Architect at a outsourcing company with 10,001+ employees

Centralized cloud costs have boosted savings while reporting and user experience still need work

The best features CloudCheckr offers include out-of-the-box security and compliance check features that provide over 35 different types of compliance checks at no cost, best practice checks, and alerts. Another valuable feature is the multi-cloud overview, providing unified reporting across AWS and Azure while allowing us to create different types of dashboards based on who logs into the platform. Additionally, from an MSP standpoint, there is good ease of deployment, especially the billing and chargeback functionality for a reseller or managed services provider. CloudCheckr has positively impacted my organization by helping us manage multiple customers and tens of thousands of resources while retaining performance and visibility due to its multi-cloud support. We do not have to worry about jumping from one platform to another, and the better MSP support is beneficial from a billing and chargeback automation standpoint. The integration in compliance helps identify missing areas within our customer environments and improves them. On average, it has helped us provide approximately 15 to 20% savings through right-sizing or idle resource elimination. These are some of the immediate cost savings our customers have experienced after implementing recommendations from the tool.

Read full review

Shritam Bhowmick

Vulnerability Management Lead at garrett

Provides reliable applications security but needs better integration options

There are areas for improvements regarding false positives. Integration capabilities are lacking, as options for integrations with other tools such as SNOW, Jira, or other integration tools are not sufficient in Rapid7 InsightAppSec. The user interface sometimes has glitches, which may prevent appropriate results during navigation, and even when we get appropriate results, it can be impossible to export them to CSV records or download files. Regarding scalability, Rapid7 InsightAppSec is not a scalable solution for our industry due to limited integration capabilities. Rapid7 relies on another tool called InsightConnect, which requires additional investment, detracting from scalability. Another area that needs improvement is the integration of AI capabilities into the platform. Both Rapid7 InsightAppSec and InsightVM need to advance in that area. In terms of behavioral and pattern recognition, identifying complex attacks such as SQL, blind SQL, JSON, and LDAP injections often results in 94% false positives. This necessitates improvement in their behavioral-based analytics feature.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The only way I have to see the costs is via CloudCheckr."

"The solution is mostly stable."

"Our clients use this to financially optimize their cloud platform, and based on their utilization it helps to decide whether their current platform needs to be optimized and what the ideal form is."

"If you are on AWS, you don't need to even think about it, just go ahead with using the solution because there's no better tool in that segment than CloudCheckr CMx High Security."

"CloudCheckr CMx High Security has a lot more detail than the native cloud service cost-management tools."

"The best feature I like about CloudCheckr CMx High Security is its simplicity. I love that it's not rocket science to use the solution. Even if you're not familiar with the cloud, you can easily figure out how to use CloudCheckr CMx High Security. You can use AWS, you can use Azure, and you can use GCP with the solution because the integration is quite simple. You can also use multi-cloud with it, and you could see the billing part. You'll have complete visibility into your cost which I love about the solution. I also love that data on any security issues and vulnerabilities are available on the go with CloudCheckr CMx High Security. You don't need to do anything different. Just run the scan and you'll have all these open findings in the tool, in terms of the priority level, so if it's critical, it will tell you, "It's critical," and you need to fix it right away."

"CloudCheckr has impacted my organization positively by making things easier and saving time, approximately three hours a week."

"CloudCheckr has enabled an average cost saving of approximately 25% from the last year, and this occurred while also increasing the scale of production."

More CloudCheckr pros

"The initial setup for us was easy enough. We didn't face too many issues. Deployment took maybe 30 minutes. It's quite quick and doesn't cause too much trouble at the outset."

"You have various attack modules, and you also have the Attack Replay feature for the attack sequence. You can reproduce an attack and see it. That is a very good feature I noticed in this solution. It helps developers as well."

"Dynamic application security scanning provides predefined templates and supports customization. The ability to scan external and internal applications, including on-premises ones, is precious. Additionally, it is a cloud platform, so we don't need to deploy servers or resources. This makes it time-efficient and cost-effective."

"The solution is stable."

"The most valuable feature of this solution is the graphical interface."

"Customers use the product for scanning purposes and do not want to be restricted with respect to the number of scans they perform."

"Relatively speaking, InsightAppSec is good compared to Insight VM."

"The product’s most valuable feature is UI. It is easy to manage and find vulnerabilities in the application."

More Rapid7 InsightAppSec pros

Cons

"The interface could be improved because it is too dense and overloaded with too many charts and too much information on each screen."

"CloudCheckr can be very slow sometimes."

"The reporting and analytic capabilities are very limited."

"Self-healing could be a bit smoother and a bit cleaner, easier to access and more functional. That would help."

"The solution needs to work better with larger capacities of data."

"I was not satisfied with the customer support from CloudCheckr."

"What needs to be improved in CloudCheckr CMx High Security is integration. All the clouds are going quite fast, for example, all the cloud providers: Microsoft, Google, etc. CloudCheckr CMx High Security is good with AWS, no doubt about it, but with Azure and Google Cloud, I find that the solution is slow in that direction. If the vendor planned for CloudCheckr CMx High Security to be automated just for AWS, then it does make sense. If not, if the vendor is also targeting good integration with Google and Microsoft, then CloudCheckr CMx High Security integration needs improvement, in particular, it has to be faster. At the moment, its integration with Azure is not as good as its integration with AWS. With GCP, integration is nowhere."

"The performance of the tool really needs to be improved."

More CloudCheckr cons

"The number of web applications we can scan is limited."

"We'd like to see integrations with WAF solutions."

"Rapid7 InsightAppSec needs improvement in detecting phishing pages."

"There is room for improvement in the response time of customer service and support levels."

"The dynamic scanning feature has simplified and improved the security testing process. I suggest adding a SaaS feature to the solution to support scanning SaaS applications, making it more comprehensive. It would be beneficial if the solution could also scan mobile applications. It only scans web applications and should also cover mobile applications, including firmware recommendations."

"In terms of behavioral and pattern recognition, identifying complex attacks such as SQL, blind SQL, JSON, and LDAP injections often results in 94% false positives."

"In the future, if they can have integration with a lot of ticketing systems then it would be amazing."

"There is room for improvement in Rapid7 InsightAppSec by giving clients the ability for extra columns on reports and enabling the extraction of remediation reports into a CSV format. Currently, the PDF format is cumbersome to go through when dealing with thousands of pages."

More Rapid7 InsightAppSec cons

Pricing and Cost Advice

"The solution is reasonably priced."

"A license is needed to use CloudCheckr CMx High Security, but because we are a managed service provider, the price of the license would vary. It depends on the type of cloud users we have, for example, it would be some type of percentage or monthly billing, etc."

"The cost is on par with other providers."

"The price of this product is very cheap."

"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."

"Rapid7 InsightAppSec is cheap."

"I'm not sure how much it costs exactly, but I know it's expensive."

"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."

"Its price is competitive. It is not expensive."

See which vendors are best for you

Use our free recommendation engine to learn which AI Observability solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

15%

Outsourcing Company

12%

Manufacturing Company

12%

Comms Service Provider

Manufacturing Company

13%

Construction Company

10%

Government

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

What is your experience regarding pricing and costs for CloudCheckr ?

My experience with pricing, setup cost, and licensing reflects that it uses custom pricing based on your cloud spend, which is pretty standard for this category. I won't pretend it's cheap, but we'...

See all answers

What needs improvement with CloudCheckr ?

The interface could be improved because it is too dense and overloaded with too many charts and too much information on each screen. Latency is also something important to take into account. The da...

See all answers

What is your primary use case for CloudCheckr ?

My main use case for CloudCheckr is checking the Azure cloud costs of my SaaS service. A specific example of how I use CloudCheckr to check those Azure cloud costs with my SaaS service is that my A...

See all answers

What needs improvement with Rapid7 InsightAppSec?

Customers sometimes experience issues with performance. One thing that I recall is that most customers often want to have reporting as per their customized dashboard. This needs to be improved beca...

See all answers

What is your primary use case for Rapid7 InsightAppSec?

I usually recommend this solution for financial institutions. Banks and financial institutions need this solution mostly because they have to follow stringent compliance advisory requirements, so t...

See all answers

What advice do you have for others considering Rapid7 InsightAppSec?

I have not heard any complaints. I do not have any recommendations because customers were initially worried about the number of scans they used to perform, and now it has been enhanced or it will s...

See all answers

Comparisons

VMWare Tanzu CloudHealth vs CloudCheckr

Compared 5% of the time

IBM Turbonomic vs CloudCheckr

Compared 4% of the time

Azure Cost Management vs CloudCheckr

Compared 3% of the time

Apptio Cloudability vs CloudCheckr

Compared 3% of the time

Rapid7 InsightCloudSec vs CloudCheckr

Compared 3% of the time

More CloudCheckr Competitors

Invicti vs Rapid7 InsightAppSec

Compared 15% of the time

PortSwigger Burp Suite Enterprise Edition vs Rapid7 InsightAppSec

Compared 14% of the time

AppCheck vs Rapid7 InsightAppSec

Compared 13% of the time

Veracode vs Rapid7 InsightAppSec

Compared 13% of the time

StackHawk vs Rapid7 InsightAppSec

Compared 11% of the time

More Rapid7 InsightAppSec Competitors

Product Reports

Buyer's Guide

CloudCheckr

August 2026

Download CloudCheckr product report

Buyer's Guide

Rapid7 InsightAppSec

August 2026

Download Rapid7 InsightAppSec product report

Also Known As

CloudCheckr CMx High Security, CloudCheckr CMP

InsightAppSec

Overview

CloudCheckr offers a cohesive platform for managing cloud infrastructures with a focus on cost visibility, security, and compliance. Designed for multi-cloud environments, it provides insights and optimizations to enhance decision-making and resource efficiency.

CloudCheckr delivers thorough cloud management with features like cost analysis, security and compliance checks, and automated optimization suggestions. Its intuitive interface allows for easy deployment, supporting cost-saving measures. Users often find its cost visibility, multi-cloud integration capabilities, and granular reporting particularly beneficial. However, improvements can be made in areas such as Azure and Google Cloud integration, reporting capabilities, pricing model clarity, and UI complexity reduction.

What are CloudCheckr's key features?

Intuitive Interface: Easy navigation and deployment enhance user interaction.
Cost Visibility: Offers in-depth financial analysis and efficiency insights.
Granular Reporting: Customizable reports that provide detailed insights.
Multi-Cloud Integration: Supports various cloud platforms efficiently.
Actionable Insights: Auto-generated optimizations help reduce expenses.

What benefits should users expect?

Cost Reduction: Identifies idle resources and optimizes usage.
Resource Management: Facilitates effective allocation and governance.
Improved Security: Runs compliance checks and addresses vulnerabilities.
Managed Services: Simplifies billing and supports multi-tenant environments.

Industries using CloudCheckr benefit from enhanced cloud financial optimization and security monitoring. Managed service providers find it crucial for customer billing, while organizations leverage its multi-cloud support for maintaining compliance and governing usage. Specifically useful in sectors like finance and technology, it aids in data analysis and cost-saving strategies.

Spot - A Flexera company

Rapid7 InsightAppSec is a cloud-based security tool offering robust web scanning capabilities with a user-friendly interface and seamless integration. It enhances dynamic application security testing through customizable modules, providing comprehensive reports and remediation guidance.

InsightAppSec delivers dynamic application security testing with features like Attack Replay and a centralized dashboard for vulnerability insights. It supports flexible deployment options and simplifies scheduling frequent scans. The tool's intuitive graphical interface and extensive scanning coverage make it valuable for identifying vulnerabilities in web applications, APIs, and e-commerce sites, ensuring compliance. However, improvements are needed in detection accuracy, reporting options, and integrations with external tools like WAF and ticketing systems. There is a need for better scan management, support for mobile applications, customized reporting options, pricing flexibility, improved support, and AI integration.

What are the key features of InsightAppSec?

Seamless Integration: Easily integrates within SDLC for automated scans.
User-Friendly Interface: Offers an intuitive graphical experience.
Robust Web Scanning: Provides extensive vulnerability scanning of web applications and APIs.
Customizable Attack Modules: Tailors testing to meet specific security needs.
Attack Replay: Facilitates re-testing of potential vulnerabilities for accuracy.
Centralized Dashboard: Offers comprehensive insights into vulnerabilities.

What benefits should users look for?

Comprehensive Reports: Delivers detailed insights into security vulnerabilities.
Remediation Guidance: Provides actionable advice to fix identified vulnerabilities.
Scalability: Supports growth by handling increased demands efficiently.
Extensive Coverage: Ensures thorough security testing across multiple platforms.
Flexible Deployment: Adapts to different operational environments.

Industries rely on InsightAppSec for vulnerability scanning to secure web applications, APIs, and e-commerce platforms. Its integration within the SDLC aids in automating scans during development. While limitations exist with certain tool integrations, its cloud-based engine and effective reporting make it essential for internal and external application security assurance.

Rapid7

Sample Customers

Accenture, Logitech, Ingram, Cloudar, Infor, DXC, Cornell University, DLT, Lumen, Lightstream, Choice Hotels, B-Tech, SmileShark, PTP, Explicity, JCH Technology, Siemens Mobility

CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace

Buyer's Guide

CloudCheckr vs. Rapid7 InsightAppSec

June 2026

Free Report: CloudCheckr vs. Rapid7 InsightAppSec

Find out what your peers are saying about CloudCheckr vs. Rapid7 InsightAppSec and other solutions. Updated: June 2026.

DOWNLOAD NOW

909,725 professionals have used our research since 2012.

See our CloudCheckr vs. Rapid7 InsightAppSec report.

See our list of best AI Observability vendors.

We monitor all AI Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.