Rapid7 InsightAppSec vs StackHawk comparison

"Rapid7 InsightAppSec helps us in both regulatory compliance and in strengthening our security posture."

"The templates feature is very easy. You just choose the kind of attack you want on your web application, and you run it against that template and receive a report. It's great."

"It uses a signature-based method to check for problems with your code and will provide an alert if anything is found."

"The initial setup for us was easy enough. We didn't face too many issues. Deployment took maybe 30 minutes. It's quite quick and doesn't cause too much trouble at the outset."

"We have seen measurable decrease in the mean time to respond to threats by 20 percent."

"Relatively speaking, InsightAppSec is good compared to Insight VM."

"Dynamic application security scanning provides predefined templates and supports customization. The ability to scan external and internal applications, including on-premises ones, is precious. Additionally, it is a cloud platform, so we don't need to deploy servers or resources. This makes it time-efficient and cost-effective."

"The product’s most valuable feature is UI. It is easy to manage and find vulnerabilities in the application."

"StackHawk has positively impacted my organization by introducing an automated process that did not exist previously, and it helped the company achieve PCI certification."

"I required a solution to manage on-premises, but I was not as satisfied as expected."

"We get a lot of false positives during the tests."

"The reporting is definitely an aspect of the solution that's in need of some work. We found that we'd try to use widgets, but often getting them to work for us wasn't very clear. They need to be more user friendly or offer better instructions."

"Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version."

"Currently, InsightAppSec lacks similar functionality. Customers must wait for remediation during the developers' preparation of a new version."

"When you add new projects for the same product, it either duplicates or replaces the scan configuration. If I run a scan for the same product with a different scan configuration, it should keep the previous scan configuration and not replace it with the new scan configuration. It should just add the new scan configuration. That would be helpful. They do keep the results as it is, but the scan configuration keeps changing. For example, I have set a scan configuration to a full scan, and next week, I want to run a new scan for the same product with some changes or new functionalities. I want to run a partial scan. Currently, if I change the scan configuration to partial, it changes the old one also to partial. That should be improved."

"The only concern I have with Rapid7 is that it does not provide enough information about vulnerabilities within AppSec."

"Rapid7 InsightAppSec needs improvement in detecting phishing pages."

"On a scale of one to ten, I would rate StackHawk an eight, only because I wish the product was a little less expensive."

"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."

"I'm not sure how much it costs exactly, but I know it's expensive."

"The price of this product is very cheap."

"Its price is competitive. It is not expensive."

"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."

"Rapid7 InsightAppSec is cheap."