Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Rapid7 InsightAppSec by Rapid7 View product | StackHawk HawkScan by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide. | StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives. |
| Product type | Cloud Dynamic Application Security Testing (DAST) Platform | Containerized Dynamic Security Scanning Engine |
| Best for | Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, Education | Software Developers, DevOps Teams, Technology Startups |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | Cloud |
| Deployment details | Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps) | Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary |
| Data residency | Global multi-region cloud hosting | Local Workstation / Pipeline Host |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Running Web ApplicationsSingle Page AppsREST APIsWeb Services | Containerized CI PipelinesDeveloper Workstations |
| Compliance | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001SOC 2 Type II | SOC 2 Type II |
| Integrations & coverage | ||
| Integrations | JiraJenkinsGitHubGitLabAzure DevOpsRapid7 InsightConnect | DockerKubernetesGitGitHubGitLabBitbucket |
| Industries | Software DevelopmentFinancial ServicesE-commerceHealthcareE-commerce & RetailHigh Tech+1 more | Software DevelopersDevOps TeamsTechnology Startups |
| Regions | Global Rapid7 cloud regions | Global |
| Vendor | ||
| Company | Rapid7 | StackHawk |
| Headquarters | Boston, Massachusetts, USA | Denver, Colorado, USA |
| Company size | 3,000+ | 51-200 |
| Founded | 2000 | 2019 |
Overview
What it is
Rapid7 InsightAppSec
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.Product type
Rapid7 InsightAppSec
Cloud Dynamic Application Security Testing (DAST) PlatformStackHawk HawkScan
Containerized Dynamic Security Scanning EngineBest for
Rapid7 InsightAppSec
Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, EducationStackHawk HawkScan
Software Developers, DevOps Teams, Technology StartupsPricing
Pricing model
Rapid7 InsightAppSec
Contact VendorStackHawk HawkScan
Contact VendorFree trial
Rapid7 InsightAppSec
Free trial: yesStackHawk HawkScan
Free trial: yesDeployment
Deployment options
Rapid7 InsightAppSec
StackHawk HawkScan
Deployment details
Rapid7 InsightAppSec
Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps)StackHawk HawkScan
Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI BinaryData residency
Rapid7 InsightAppSec
Global multi-region cloud hostingStackHawk HawkScan
Local Workstation / Pipeline HostKey features
What it offers
Rapid7 InsightAppSec
- Universal JavaScript crawling engine
- Modern SPA scanning
- REST API testing
- Attack replay validation
- Automated CI/CD pipeline plugins
- Jira integration
- Dynamic web vulnerability scanning
- CI/CD security gating
StackHawk HawkScan
- Containerized DAST engine
- Hawkscan.yml configuration as code
- OpenAPI parsing
- Custom script injection
- Local terminal output
- Containerized DAST execution
- Configuration-as-code vulnerability scanning
- Local debugging
Platform & access
API access
Rapid7 InsightAppSec
API access: yesStackHawk HawkScan
API access: yesSingle sign-on (SSO)
Rapid7 InsightAppSec
SSO: yesStackHawk HawkScan
SSO: yesRole-based access (RBAC)
Rapid7 InsightAppSec
RBAC: yesStackHawk HawkScan
RBAC: yesMulti-tenant
Rapid7 InsightAppSec
Multi-tenant: yesStackHawk HawkScan
Multi-tenant: yesMobile app
Rapid7 InsightAppSec
Mobile app: noStackHawk HawkScan
Mobile app: noSupported platforms
Rapid7 InsightAppSec
StackHawk HawkScan
Compliance
Rapid7 InsightAppSec
StackHawk HawkScan
Integrations & coverage
Integrations
Rapid7 InsightAppSec
StackHawk HawkScan
Industries
Rapid7 InsightAppSec
StackHawk HawkScan
Regions
Rapid7 InsightAppSec
StackHawk HawkScan
Vendor
Company
Rapid7 InsightAppSec
Rapid7StackHawk HawkScan
StackHawkHeadquarters
Rapid7 InsightAppSec
Boston, Massachusetts, USAStackHawk HawkScan
Denver, Colorado, USACompany size
Rapid7 InsightAppSec
3,000+StackHawk HawkScan
51-200Founded
Rapid7 InsightAppSec
2000StackHawk HawkScan
2019