No more typing reviews! Try our Samantha, our new voice AI agent.

Kong Konnect vs Rapid7 InsightAppSec comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kong Konnect
Ranking in AI Observability
16th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
9
Ranking in other categories
API Management (13th)
Rapid7 InsightAppSec
Ranking in AI Observability
23rd
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
20
Ranking in other categories
Dynamic Application Security Testing (DAST) (5th)
 

Mindshare comparison

As of August 2026, in the AI Observability category, the mindshare of Kong Konnect is 0.6%. The mindshare of Rapid7 InsightAppSec is 0.6%. It is calculated based on PeerSpot user engagement data.
AI Observability Mindshare Distribution
ProductMindshare (%)
Kong Konnect0.6%
Rapid7 InsightAppSec0.6%
Other98.8%
AI Observability
 

Featured Reviews

AK
CTO at Keogh Innovation
Centralizes API and AI control planes and has enabled federated self-service for many teams
The whole area of API and AI management is quite complex, with so many different ways of being able to do things. I think a positive of Kong is that it's so configurable and extendable, but that is also a con because there are so many ways of achieving the same thing that I think often people are either confused or struggle to get going as to how to solve a particular problem. In my mind, a more opinionated deployment of Kong itself or even how to solve certain use cases would be something I would like to see, so a more opinionated use of their products and configuration of their products on how to solve the most common use cases. That's probably the main thing about needed improvements for Kong Konnect. It's a pretty fully-fledged platform; there obviously are portions of it that could be improved. But I think overall as a platform, it's really good, and I think it can help the majority of organizations looking to manage their throughput of APIs or AI traffic. The majority of what I've said before probably covers the improvements needed for Kong Konnect. There probably are some API Ops and AI Ops changes that could be improved, which is not necessarily the Kong Konnect product, but some of the toolchains around it. I'm thinking around, especially if it's API Ops, about topics like better GitOps processes and the ways of being able to roll back changes when there are issues. At the moment, a lot of that is either non-existent or is hand-cranked. I would like to see the ability to roll back configurations when there are issues being added to the product.
Shritam Bhowmick - PeerSpot reviewer
Vulnerability Management Lead at garrett
Provides reliable applications security but needs better integration options
There are areas for improvements regarding false positives. Integration capabilities are lacking, as options for integrations with other tools such as SNOW, Jira, or other integration tools are not sufficient in Rapid7 InsightAppSec. The user interface sometimes has glitches, which may prevent appropriate results during navigation, and even when we get appropriate results, it can be impossible to export them to CSV records or download files. Regarding scalability, Rapid7 InsightAppSec is not a scalable solution for our industry due to limited integration capabilities. Rapid7 relies on another tool called InsightConnect, which requires additional investment, detracting from scalability. Another area that needs improvement is the integration of AI capabilities into the platform. Both Rapid7 InsightAppSec and InsightVM need to advance in that area. In terms of behavioral and pattern recognition, identifying complex attacks such as SQL, blind SQL, JSON, and LDAP injections often results in 94% false positives. This necessitates improvement in their behavioral-based analytics feature.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Kong Konnect has positively impacted our organization by securing our APIs, which is one of the main concerns for us, and securing our APIs has benefited our organization by improving compliance and reducing incidents."
"I think it's a really great tool, and I've seen a number of enterprise companies using it."
"Kong Konnect has positively impacted my organization by making our development easier and helping us push new routes to our current customers."
"Their tech support is excellent; when I raise an incident or a support ticket, it gets answered in four hours."
"Kong Konnect has impacted my organization positively, particularly in enhancing security and providing a compliance dashboard for applications, making it a very positive impact on my organization."
"The documentation is excellent, and it includes a developer portal, which helps create a common distribution channel for APIs within and outside the enterprise."
"Since using Kong Konnect, I have observed less time in onboarding external partners for our internal APIs, less time in exposing our APIs with proper authentication and rate limiting, and more collaboration for discovering API specifications across platforms."
"Technical support from Proofpoint was absolutely excellent."
"I would rate the technical support from Rapid7 a ten, indicating high-quality support."
"The automatic automation of the automated authorization to the SCANNET environment is valuable."
"Rapid7 InsightAppSec helps us in both regulatory compliance and in strengthening our security posture."
"Customers use the product for scanning purposes and do not want to be restricted with respect to the number of scans they perform."
"If a company needs an effective product for web scanning, I can recommend this product."
"For our needs, Rapid7 was the ideal go-to tool."
"The reporting functionality is excellent."
"The solution is stable."
 

Cons

"Kong Konnect can be improved by simplifying pricing to make it more transparent, simplifying the user experience so that non-technical people can also configure API specifications, and by supporting more enterprise plugins and third-party integrations to make it more robust."
"I wish Kong Konnect could improve by having a built-in notification system whenever any APIs get pinged so that we can receive alerts and send them to the developer."
"I think a positive of Kong is that it's so configurable and extendable, but that is also a con because there are so many ways of achieving the same thing that I think often people are either confused or struggle to get going as to how to solve a particular problem."
"When comparing documentation, Kong's documentation is not on par with Google, Amazon, or other cloud providers."
"Kong Konnect's RBAC needs to evolve more, as they currently offer only one or two levels of RBAC in terms of organization and teams."
"I do not rate Kong Konnect a nine out of ten because the configuration can be complex and not beginner-friendly."
"Pricing was the issue as it becomes very expensive due to the nature of local circumstances."
"I would recommend that Kong add the capability to sort the routes by name, date, or size, as the current setup does not support this."
"There is room for improvement in Rapid7 InsightAppSec by giving clients the ability for extra columns on reports and enabling the extraction of remediation reports into a CSV format. Currently, the PDF format is cumbersome to go through when dealing with thousands of pages."
"The product’s pricing could be flexible."
"The reporting is definitely an aspect of the solution that's in need of some work."
"The technical support from Rapid7 is not bad, but the response time can be quite slow sometimes."
"We'd like to see integrations with WAF solutions."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."
"They should add more features. I would like to see them do a little more on static analysis and also interactivity analysis. Currently, it does very basic static analysis. It could do a little more static analysis, which is something that would help. A lot more interactivity analysis should also be there. It should basically look at security during interactivity."
"I would like more details of what the product can do."
 

Pricing and Cost Advice

Information not available
"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."
"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."
"The price of this product is very cheap."
"I'm not sure how much it costs exactly, but I know it's expensive."
"Rapid7 InsightAppSec is cheap."
"Its price is competitive. It is not expensive."
report
Use our free recommendation engine to learn which AI Observability solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Outsourcing Company
13%
Manufacturing Company
13%
Construction Company
7%
Manufacturing Company
13%
Construction Company
10%
Government
9%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise3
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for Kong Konnect?
Regarding my experience with pricing, setup cost, and licensing, I find that the pricing can be made more transparent and more helpful for enterprise integration.
What needs improvement with Kong Konnect?
I would recommend that Kong add the capability to sort the routes by name, date, or size, as the current setup does not support this. I would suggest that Kong make the routes or services appear in...
What is your primary use case for Kong Konnect?
We use Kong Konnect primarily for centralized API management, API security, Kubernetes ingress management, traffic control, observability, and governance across multiple environments. Additionally,...
What needs improvement with Rapid7 InsightAppSec?
Customers sometimes experience issues with performance. One thing that I recall is that most customers often want to have reporting as per their customized dashboard. This needs to be improved beca...
What is your primary use case for Rapid7 InsightAppSec?
I usually recommend this solution for financial institutions. Banks and financial institutions need this solution mostly because they have to follow stringent compliance advisory requirements, so t...
What advice do you have for others considering Rapid7 InsightAppSec?
I have not heard any complaints. I do not have any recommendations because customers were initially worried about the number of scans they used to perform, and now it has been enhanced or it will s...
 

Also Known As

No data available
InsightAppSec
 

Overview

 

Sample Customers

Information Not Available
CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace
Find out what your peers are saying about Kong Konnect vs. Rapid7 InsightAppSec and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.