# Rapid7 InsightAppSec: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 25 judge labels across 1 category by 13 of 14 models. Page: https://www.gane.ai/index/it/vendors/rapid7-insightappsec

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Dynamic application security testing](https://www.gane.ai/index/it/developer/dynamic-application-security-testing/index.md) | 0% | 15 | 12% | 25 |

## What the models said for it

- "best for mid-market enterprises prioritizing user experience, developer collaboration, and compliance requirements" (Claude Haiku 4.5, DAST)
- "Ideal for cloud-native or growing portfolios. Strong analytics, DevSecOps focus, and easy scaling." (Grok 4.20, DAST)
- "Top-Rated Options (from 2023–2025 reviews): Probely, StackHawk, Rapid7 InsightAppSec" (Grok 4.20, DAST)
- "For large enterprises needing compliance & scale: Choose Qualys or Rapid7." (Qwen 3.7 Flash, DAST)

## And against it

- "Same issues as Qualys; legacy architecture struggling with modern applications" (Kimi K2, DAST)
- "Enterprise DAST platforms (like Veracode, Rapid7 InsightAppSec, or Fortify) often cost tens of thousands of dollars per year." (Gemini 3.5 Flash, DAST)
- "more enterprise-friendly, but usually much more expensive" (GPT-5.4 mini, DAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 2 | 0 | 1 | 3 |
| Gemini 3.5 Flash | 0 | 1 | 2 | 1 | 4 |
| Perplexity Sonar | 0 | 1 | 1 | 0 | 2 |
| Grok 4.20 | 0 | 2 | 2 | 0 | 4 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 2 | 0 | 0 | 2 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 0 | 2 | 1 | 3 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Rapid7 InsightAppSec, from 63 of the 77 answers that named it (only the models that return a source list).

### Domains cited

- checkmarx.com: 25
- invicti.com: 25
- safeguard.sh: 25
- aimultiple.com: 24
- softwaretestinghelp.com: 23
- aikido.dev: 17
- immuniweb.com: 17
- geekflare.com: 16
- augmentcode.com: 15
- brightsec.com: 15

### Pages cited

- https://aimultiple.com/dast-tools: 23
- https://softwaretestinghelp.com/dynamic-application-security-testing-dast-software: 23
- https://safeguard.sh/resources/blog/best-dast-tools-for-web-application-security-testing: 19
- https://aikido.dev/blog/top-enterprise-dast-tools: 17
- https://immuniweb.com/resources/best-dast-tools: 17
- https://geekflare.com/cybersecurity/best-dast-scanners: 16
- https://augmentcode.com/tools/best-dast-tools-for-enterprise-security: 15
- https://checkmarx.com/learn/dast/dast-tools-key-features-and-12-solutions-to-know-in-2026: 14

## In its own words

What Rapid7 InsightAppSec's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: providing Dynamic Application Security Testing (DAST) for mature and maturing Application Security professionals (https://docs.rapid7.com/insightappsec)
- For: mature and maturing Application Security professionals (https://docs.rapid7.com/insightappsec)
- Certifications: PCI DSS, HIPAA, SOX, OWASP Top 10

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.