Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Rapid7 InsightAppSec by Rapid7 View product | StackHawk DAST by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide. | Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide. |
| Product type | Cloud Dynamic Application Security Testing (DAST) Platform | CI/CD Native Dynamic Application Security Testing Platform |
| Best for | Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, Education | DevSecOps, Software Engineering, Financial Services, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | SaaSCloud |
| Deployment details | Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps) | Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI |
| Data residency | Global multi-region cloud hosting | United States; Global Cloud |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Running Web ApplicationsSingle Page AppsREST APIsWeb Services | Web ApplicationsMicroservicesCI/CD Runners |
| Compliance | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001SOC 2 Type II | SOC 2 Type IIGDPR |
| Integrations & coverage | ||
| Integrations | JiraJenkinsGitHubGitLabAzure DevOpsRapid7 InsightConnect | GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira |
| Industries | Software DevelopmentFinancial ServicesE-commerceHealthcareE-commerce & RetailHigh Tech+1 more | DevSecOpsSoftware EngineeringFinancial ServicesTechnology |
| Regions | Global Rapid7 cloud regions | Global |
| Vendor | ||
| Company | Rapid7 | StackHawk |
| Headquarters | Boston, Massachusetts, USA | Denver, Colorado, USA |
| Company size | 3,000+ | 51-200 |
| Founded | 2000 | 2019 |
Overview
What it is
Rapid7 InsightAppSec
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.StackHawk DAST
Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.Product type
Rapid7 InsightAppSec
Cloud Dynamic Application Security Testing (DAST) PlatformStackHawk DAST
CI/CD Native Dynamic Application Security Testing PlatformBest for
Rapid7 InsightAppSec
Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, EducationStackHawk DAST
DevSecOps, Software Engineering, Financial Services, TechnologyPricing
Pricing model
Rapid7 InsightAppSec
Contact VendorStackHawk DAST
Contact VendorFree trial
Rapid7 InsightAppSec
Free trial: yesStackHawk DAST
Free trial: yesDeployment
Deployment options
Rapid7 InsightAppSec
StackHawk DAST
Deployment details
Rapid7 InsightAppSec
Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps)StackHawk DAST
Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLIData residency
Rapid7 InsightAppSec
Global multi-region cloud hostingStackHawk DAST
United States; Global CloudKey features
What it offers
Rapid7 InsightAppSec
- Universal JavaScript crawling engine
- Modern SPA scanning
- REST API testing
- Attack replay validation
- Automated CI/CD pipeline plugins
- Jira integration
- Dynamic web vulnerability scanning
- CI/CD security gating
StackHawk DAST
- Developer-first DAST
- Automated pull request testing
- Authenticated session fuzzing
- Reproducible curl commands
- CI/CD security quality gates
- Developer-driven dynamic security testing
- Pull-request vulnerability triage
- DevSecOps
Platform & access
API access
Rapid7 InsightAppSec
API access: yesStackHawk DAST
API access: yesSingle sign-on (SSO)
Rapid7 InsightAppSec
SSO: yesStackHawk DAST
SSO: yesRole-based access (RBAC)
Rapid7 InsightAppSec
RBAC: yesStackHawk DAST
RBAC: yesMulti-tenant
Rapid7 InsightAppSec
Multi-tenant: yesStackHawk DAST
Multi-tenant: yesMobile app
Rapid7 InsightAppSec
Mobile app: noStackHawk DAST
Mobile app: noSupported platforms
Rapid7 InsightAppSec
StackHawk DAST
Compliance
Rapid7 InsightAppSec
StackHawk DAST
Integrations & coverage
Integrations
Rapid7 InsightAppSec
StackHawk DAST
Industries
Rapid7 InsightAppSec
StackHawk DAST
Regions
Rapid7 InsightAppSec
StackHawk DAST
Vendor
Company
Rapid7 InsightAppSec
Rapid7StackHawk DAST
StackHawkHeadquarters
Rapid7 InsightAppSec
Boston, Massachusetts, USAStackHawk DAST
Denver, Colorado, USACompany size
Rapid7 InsightAppSec
3,000+StackHawk DAST
51-200Founded
Rapid7 InsightAppSec
2000StackHawk DAST
2019