Dynamic application security testing · RankedRapid7 InsightAppSec
Rapid7 InsightAppSec is a dynamic application security testing product from Rapid7 · rapid7.com ↗
Read the same way at every company size.
The standing depends on who is buying. Every model is asked the same questions for each company size.
OWASP ZAP is first at 51%.
Invicti is first at 33%. 0 of 14 models made it the first choice when asked directly.
Invicti is first at 58%.
Why models recommend it
“best for mid-market enterprises prioritizing user experience, developer collaboration, and compliance requirements”Claude Haiku 4.5 · Paraphrase question · alternative
“Ideal for cloud-native or growing portfolios. Strong analytics, DevSecOps focus, and easy scaling.”Grok 4.20 · Paraphrase question · alternative
“Top-Rated Options (from 2023–2025 reviews): Probely, StackHawk, Rapid7 InsightAppSec”Grok 4.20 · Negative question · alternative
“For large enterprises needing compliance & scale: Choose Qualys or Rapid7.”Qwen 3.7 Flash · Comparative question · alternative
What gives them pause
“Same issues as Qualys; legacy architecture struggling with modern applications”Kimi K2 · Negative question · warning
“Enterprise DAST platforms (like Veracode, Rapid7 InsightAppSec, or Fortify) often cost tens of thousands of dollars per year.”Gemini 3.5 Flash · Budget-constrained question · warning
“more enterprise-friendly, but usually much more expensive”GPT-5.4 mini · Budget-constrained question · warning
Also on the shortlist
The products named in the same answers as Rapid7 InsightAppSec, over the 77 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 64 | 35 | View → | |
| 45 | 8 | View → | |
| 36 | 3 | View → | |
| 36 | 3 | View → | |
| 34 | 1 | View → | |
| 32 | 0 | View → | |
| 32 | 0 | View → | |
| 29 | 1 | View → | |
| 27 | 4 | View → | |
| 19 | 0 | View → |
What the models named instead of Rapid7 InsightAppSec →
A side-by-side page exists where both products are among a category's top eight.
At a glance
Stated on Rapid7 InsightAppSec's own site, not checked by Gane.
- For
- mature and maturing Application Security professionals
- Certifications
- PCI DSS, HIPAA, SOX, OWASP Top 10
- Also from Rapid7
- Rapid7 ASM, Rapid7 AppSec Platform, Rapid7 Exposure Command, Rapid7 Incident Command, Rapid7 InsightCloudSec, Rapid7 InsightConnect and 10 more
How this is measured
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Sources returned with these answers
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 63 of the 77 answers that named Rapid7 InsightAppSec and are not a share of its labels.
Domains cited
202 of the 202 domain citations in answers naming Rapid7 InsightAppSec came from a third party's page.
Pages cited
Pages are listed as the models cited them.
By model
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 2 | 0 | 1 | 3 |
| Gemini 3.5 Flash | 0 | 1 | 2 | 1 | 4 |
| Perplexity Sonar | 0 | 1 | 1 | 0 | 2 |
| Grok 4.20 | 0 | 2 | 2 | 0 | 4 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 2 | 0 | 0 | 2 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 0 | 2 | 1 | 3 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |