Rapid7 InsightAppSec is a cloud-based security tool offering robust web scanning capabilities with a user-friendly interface and seamless integration. It enhances dynamic application security testing through customizable modules, providing comprehensive reports and remediation guidance.


| Product | Mindshare (%) |
|---|---|
| Rapid7 InsightAppSec | 5.8% |
| Veracode | 15.7% |
| Checkmarx One | 15.0% |
| Other | 63.5% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Dynamic Application Security Testing (DAST) | May 6, 2026 | Download |
| Product | Reviews, tips, and advice from real users | May 6, 2026 | Download |
| Comparison | Rapid7 InsightAppSec vs Veracode | May 6, 2026 | Download |
| Comparison | Rapid7 InsightAppSec vs Checkmarx One | May 6, 2026 | Download |
| Comparison | Rapid7 InsightAppSec vs OpenText Dynamic Application Security Testing | May 6, 2026 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Checkmarx One | 3.9 | 15.0% | 88% | 81 interviewsAdd to research |
| Veracode | 4.0 | 15.7% | 89% | 207 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 84 |
| Midsize Enterprise | 68 |
| Large Enterprise | 146 |
InsightAppSec delivers dynamic application security testing with features like Attack Replay and a centralized dashboard for vulnerability insights. It supports flexible deployment options and simplifies scheduling frequent scans. The tool's intuitive graphical interface and extensive scanning coverage make it valuable for identifying vulnerabilities in web applications, APIs, and e-commerce sites, ensuring compliance. However, improvements are needed in detection accuracy, reporting options, and integrations with external tools like WAF and ticketing systems. There is a need for better scan management, support for mobile applications, customized reporting options, pricing flexibility, improved support, and AI integration.
What are the key features of InsightAppSec?Industries rely on InsightAppSec for vulnerability scanning to secure web applications, APIs, and e-commerce platforms. Its integration within the SDLC aids in automating scans during development. While limitations exist with certain tool integrations, its cloud-based engine and effective reporting make it essential for internal and external application security assurance.
Rapid7 InsightAppSec was previously known as InsightAppSec.
CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace
| Author info | Rating | Review Summary |
|---|---|---|
| Vulnerability Management Lead at garrett | 3.5 | We use Rapid7 InsightAppSec for internal and external application security assessments. It offers strong scan coverage and reporting. However, it needs better integration, fewer false positives, and enhanced AI capabilities. Its interface and scalability require improvement. We deploy via AWS. |
| Head Of Cyber Security at Super Secure | 3.5 | I've worked with Rapid7 InsightAppSec for over three years and found it reliable, especially for financial institutions. Customers appreciate flexible scan scheduling, though customizable reporting could improve. Support is decent, pricing is fair, and renewals suggest satisfaction. |
| Manager at a financial services firm with 5,001-10,000 employees | 3.0 | I used Rapid7 InsightAppSec alongside Insight VM for managing on-premises needs but found InsightAppSec better in web-based systems. Though it offers some good features, improvements are needed in customer support, integration, and pricing. I previously used different on-premises solutions. |
| Works | 4.0 | We use Rapid7 InsightAppSec primarily to scan for vulnerabilities in APIs and UIs, finding the remediation feature most valuable. However, report generation could be improved by allowing additional columns and CSV exports, as PDFs are cumbersome. |
| Head of Infrastructure at Pearl Data Direct | 4.0 | We use Rapid7 InsightAppSec mainly for securing our Java-based applications through monthly penetration tests. It excels in realistic threat simulation but needs improvements in customizable reporting and user interface. We also use Qualys WAS for vulnerability management. |
| Technical Manager at a computer software company with 11-50 employees | 4.0 | I find Rapid7 InsightAppSec a good, stable DAST solution with neat reports and easy scalability. While customer service response can be slow and I wish the price was lower, I recommend it for its valuable features, rating it 8-9/10. |
| IT Security Engineer at a financial services firm with 51-200 employees | 4.0 | I use InsightAppSec to help customers with environment scans, automating authorization effectively. However, it lacks virtual patching found in AppSpyder, which delays remediation. Competitors like Acunetix and Qualys have similar offerings. Deployment utilizes other cloud providers. |
| Senior Cybersecurity Solutions Engineer at Trillium Information Security Systems | 4.5 | I use Rapid7 InsightAppSec for dynamic application security scanning of web applications to identify vulnerabilities. Its cloud platform eliminates the need for server deployment, but I wish it could also scan mobile and SaaS applications for comprehensive coverage. |