Imperva Application Security Platform vs Rapid7 AppSpider comparison

Why PeerSpot?

The compared Imperva and Rapid7 solutions aren't in the same category. Imperva is ranked #3 in DDOS , with an average rating of 8.7, and holds a 7.4% mindshare in the category. Rapid7 is ranked #31 in SAST , and holds a 0.8% mindshare. Additionally, 95% of Imperva users are willing to recommend the solution, compared to 100% of Rapid7 users who would recommend it.

Imperva Application Securit...

Read 148 Imperva Application Security Platform reviews

23,984 Views
8,155 Comparison Views

95% willing to recommend

Rapid7 AppSpider

Read 14 Rapid7 AppSpider reviews

2,985 Views
2,060 Comparison Views

100% willing to recommend

Imperva Application Securit...

Rapid7 AppSpider

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Imperva Application Security Platform and Rapid7 AppSpider based on real PeerSpot user reviews.

Find out what your peers are saying about Radware, Cloudflare, Imperva and others in Distributed Denial-of-Service (DDoS) Protection.

To learn more, read our detailed Distributed Denial-of-Service (DDoS) Protection Report (Updated: October 2026).

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

October 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Imperva Application Securit...

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

148

Ranking in other categories

CDN (2nd), Web Application Firewall (WAF) (1st), Distributed Denial-of-Service (DDoS) Protection (3rd), Bot Management (1st), API Security (1st)

Rapid7 AppSpider

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (31st)

Mindshare comparison

Imperva Application Security Platform and Rapid7 AppSpider aren’t in the same category and serve different purposes. Imperva Application Security Platform is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 7.4%, up 7.3% compared to last year.
Rapid7 AppSpider, on the other hand, focuses on Static Application Security Testing (SAST), holds 0.8% mindshare, up 0.6% since last year.

Distributed Denial-of-Service (DDoS) Protection Mindshare Distribution
Product	Mindshare (%)
Imperva Application Security Platform	7.4%
Cloudflare	11.2%
Radware Cloud DDoS Protection Service	6.7%
Other	74.7%

Distributed Denial-of-Service (DDoS) Protection

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Rapid7 AppSpider	0.8%
SonarQube	12.3%
Checkmarx One	7.8%
Other	79.1%

Static Application Security Testing (SAST)

Featured Reviews

reviewer2818155

Senior Associate at a tech vendor with 10,001+ employees

Application protection has improved and reporting and dashboards still need refinement

I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.

Read full review

Hiroshi Watanabe

Marketing Expert at J's communication

Clients benefit from broad authentication and effective crawling but need localization improvements

Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization.…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Imperva DDoS helps us automate production. The client had specific requirements for a cloud project in the financial sector."

"Based on what I observed when I used Imperva Application Security Platform, it is very useful and the features are great, and it is very helpful in terms of operations."

"Without tuning, it blocked 88 percent of the vulnerabilities, and when we tuned it, it blocked 98 percent."

"The solution has a very good interface."

"Technical support was very helpful."

"Hands down, the WAF is the most valuable feature; being able to identify, block, whitelist or blacklist as needed, are all valuable."

"The most valuable features of the Imperva Web Application Firewall are DDoS, malware, and the other malicious threat prevention it provides. Additionally, third-party integration is available. You can forward the log for further analysis."

"Incapsula provides a very simple to install and configure solution, that can be up and running in minutes."

More Imperva Application Security Platform pros

"The solution is highly stable, rated at ten out of ten."

"What I like most about AppSpider is that it's easy to use and its automated scan gives me all the details I need to know when it comes to vulnerabilities and their solutions."

"This solution is a leader in the industry."

"Rapid7 AppSpider is good at managing different applications. It uses applets and generates reports to cover the PCA/GDPR compliance requirements."

"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."

"AppSpider's most valuable feature is reporting - everything is stored in the local database so it can be sent to other machines."

"The entire solution is interactive and has a point-and-click user experience, which makes it easy to find items or drill down on information, and you don't need specialized skills to use the product."

"One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization."

More Rapid7 AppSpider pros

Cons

"Imperva Application Security Platform could be improved if it allowed integration with Active Directory in the cloud, or if it provided visibility of user roles and permissions."

"I would like to have support for SSL management and secure DNS."

"It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."

"This is a very limited tool if you're looking to customize."

"Incapsula: Allow easier scripting of firewall rules."

"I think the pricing needs some tweaks."

"The solution should integrate with something that looks at continuous security management."

"We've had some issues with them in terms of response times, but overall they are okay."

More Imperva Application Security Platform cons

"AppSpider has some problems with the RAM needed while scanning."

"This price of this solution is a little bit expensive."

"Integration could be better."

"The solution is too slow. It could take a full day to scan. Competitors are much faster."

"The tech support is responsive but issues remain unresolved."

"For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users."

"It needs better integration with mobile applications."

"The enterprise interface is too simple. It should be more customizable."

More Rapid7 AppSpider cons

Pricing and Cost Advice

"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."

"The solution's pricing is an issue."

"The data packages are higher than our needs so we end up paying for data that we don't use."

"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."

"The price of this solution is a little bit high compared to competitors."

"It is a very expensive solution. The price is very high. A lot of customers tell us that they would love to use Imperva more. I have some customers who have 50 websites, but they have only 10 websites on Imperva because of the price. They would love to have all their websites running through Imperva, but they can't. They have to choose the more critical websites to protect because the price is very high. It is a very good product, but it is too expensive. If you buy a plan for 20 megabytes and you don't consume all of your 20 megabytes, it is okay, but if you consume more, you are charged for the superior traffic."

"The price is high compared to other solutions like FortiWeb."

"Imperva charges us based on bandwidth, which is better than other vendors that charge us according to data transfer."

More Imperva Application Security Platform pricing and cost advice

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."

"The price is pretty fair."

"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."

"The licensing cost depends on the number of users."

"AppSpider is closed-source software and you need to acquire a license in order to use it."

See which vendors are best for you

Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

13%

Financial Services Firm

11%

Manufacturing Company

Construction Company

Manufacturing Company

12%

University

10%

Construction Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	88
Midsize Enterprise	25
Large Enterprise	71

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	2
Large Enterprise	1

Questions from the Community

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.

See all answers

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...

See all answers

What needs improvement with Imperva DDoS?

I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...

See all answers

What is your experience regarding pricing and costs for Rapid7 AppSpider?

The price is not high, but for Japanese customers, localization may incur additional costs.

See all answers

What needs improvement with Rapid7 AppSpider?

For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users.

See all answers

What is your primary use case for Rapid7 AppSpider?

Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments.

See all answers

Comparisons

Cloudflare vs Imperva Application Security Platform

Compared 8% of the time

Akamai vs Imperva Application Security Platform

Compared 4% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 3% of the time

Link11 vs Imperva Application Security Platform

Compared 3% of the time

Fastly vs Imperva Application Security Platform

Compared 3% of the time

More Imperva Application Security Platform Competitors

Checkmarx One vs Rapid7 AppSpider

Compared 10% of the time

OWASP Zap vs Rapid7 AppSpider

Compared 10% of the time

HCL AppScan vs Rapid7 AppSpider

Compared 5% of the time

SonarQube vs Rapid7 AppSpider

Compared 5% of the time

F5 BIG-IP Local Traffic Manager (LTM) vs Rapid7 AppSpider

Compared 5% of the time

More Rapid7 AppSpider Competitors

Product Reports

Buyer's Guide

Imperva Application Security Platform

October 2026

Imperva Application Security Platform report

Download Imperva Application Security Platform product report

Buyer's Guide

Rapid7 AppSpider

October 2026

Download Rapid7 AppSpider product report

Also Known As

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

AppSpider

Overview

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Rapid7 AppSpider provides rapid vulnerability detection and comprehensive reporting, integrating seamlessly with development cycles to enhance web application security. It is widely recognized for its detailed remediation steps and compliance with international standards like ISO27001.

Renowned for its robust security assessment capabilities, Rapid7 AppSpider stands out by offering advanced crawling technology and interactive interface features. Despite its slower performance compared to some competitors, it efficiently manages applications with configurable reporting and a focus on reducing false positives. Users find its automation and extensive integration capabilities valuable, although they indicate a need for improved interface enhancements and better report localization for specific regions like Japan.

What are the key features of Rapid7 AppSpider?

Rapid Vulnerability Detection: Quickly identifies security issues within applications.
Comprehensive Reporting: Offers detailed, configurable reports for thorough analysis.
International Compliance: Aligns with standards such as ISO27001 for security assurance.
Extensive Integration: Integrates with various software development life cycles.
Interactive Interface: User-friendly design enhances ease of use and engagement.
Automation: Streamlines processes with automated scanning capabilities.
Portability: Easily managed across different environments and platforms.

What benefits should be considered when evaluating Rapid7 AppSpider?

Detailed Remediation Steps: Provides guidance on addressing identified vulnerabilities.
Low False Positives: Ensures higher accuracy in scan results.
Compliance Control: Helps maintain adherence to security standards and regulations.
API Auditing Capabilities: Extensive checks on web application interfaces.
Comprehensive Reports: Detailed documentation aids in security decision-making.

In sectors such as finance, healthcare, and technology, companies leverage Rapid7 AppSpider to enhance their security management. It plays an integral role in vulnerability assessment processes, aiding in the compliance with international security standards and reforms in security testing strategies, especially during auditing and routine application scans.

Rapid7

Sample Customers

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Microsoft

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

October 2026

Download Free Report

Find out what your peers are saying about Radware, Cloudflare, Imperva and others in Distributed Denial-of-Service (DDoS) Protection. Updated: October 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

We monitor all Distributed Denial-of-Service (DDoS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.