Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | StackHawk HawkScan by StackHawk View product | Rapid7 InsightAppSec by Rapid7 View product |
|---|---|---|
| Overview | ||
| What it is | StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives. | Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide. |
| Product type | Containerized Dynamic Security Scanning Engine | Cloud Dynamic Application Security Testing (DAST) Platform |
| Best for | Software Developers, DevOps Teams, Technology Startups | Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloudHybridOn-Premise |
| Deployment details | Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary | Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps) |
| Data residency | Local Workstation / Pipeline Host | Global multi-region cloud hosting |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Containerized CI PipelinesDeveloper Workstations | Running Web ApplicationsSingle Page AppsREST APIsWeb Services |
| Compliance | SOC 2 Type II | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001SOC 2 Type II |
| Integrations & coverage | ||
| Integrations | DockerKubernetesGitGitHubGitLabBitbucket | JiraJenkinsGitHubGitLabAzure DevOpsRapid7 InsightConnect |
| Industries | Software DevelopersDevOps TeamsTechnology Startups | Software DevelopmentFinancial ServicesE-commerceHealthcareE-commerce & RetailHigh Tech+1 more |
| Regions | Global | Global Rapid7 cloud regions |
| Vendor | ||
| Company | StackHawk | Rapid7 |
| Headquarters | Denver, Colorado, USA | Boston, Massachusetts, USA |
| Company size | 51-200 | 3,000+ |
| Founded | 2019 | 2000 |
Overview
What it is
StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.Rapid7 InsightAppSec
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.Product type
StackHawk HawkScan
Containerized Dynamic Security Scanning EngineRapid7 InsightAppSec
Cloud Dynamic Application Security Testing (DAST) PlatformBest for
StackHawk HawkScan
Software Developers, DevOps Teams, Technology StartupsRapid7 InsightAppSec
Software Development, Financial Services, E-commerce, Healthcare, E-commerce & Retail, High Tech, EducationPricing
Pricing model
StackHawk HawkScan
Contact VendorRapid7 InsightAppSec
Contact VendorFree trial
StackHawk HawkScan
Free trial: yesRapid7 InsightAppSec
Free trial: yesDeployment
Deployment options
StackHawk HawkScan
Rapid7 InsightAppSec
Deployment details
StackHawk HawkScan
Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI BinaryRapid7 InsightAppSec
Cloud SaaS / Hybrid On-Premises Engine; Cloud SaaS; On-Premises Scan Engine (for Internal Apps)Data residency
StackHawk HawkScan
Local Workstation / Pipeline HostRapid7 InsightAppSec
Global multi-region cloud hostingKey features
What it offers
StackHawk HawkScan
- Containerized DAST engine
- Hawkscan.yml configuration as code
- OpenAPI parsing
- Custom script injection
- Local terminal output
- Containerized DAST execution
- Configuration-as-code vulnerability scanning
- Local debugging
Rapid7 InsightAppSec
- Universal JavaScript crawling engine
- Modern SPA scanning
- REST API testing
- Attack replay validation
- Automated CI/CD pipeline plugins
- Jira integration
- Dynamic web vulnerability scanning
- CI/CD security gating
Platform & access
API access
StackHawk HawkScan
API access: yesRapid7 InsightAppSec
API access: yesSingle sign-on (SSO)
StackHawk HawkScan
SSO: yesRapid7 InsightAppSec
SSO: yesRole-based access (RBAC)
StackHawk HawkScan
RBAC: yesRapid7 InsightAppSec
RBAC: yesMulti-tenant
StackHawk HawkScan
Multi-tenant: yesRapid7 InsightAppSec
Multi-tenant: yesMobile app
StackHawk HawkScan
Mobile app: noRapid7 InsightAppSec
Mobile app: noSupported platforms
StackHawk HawkScan
Rapid7 InsightAppSec
Compliance
StackHawk HawkScan
Rapid7 InsightAppSec
Integrations & coverage
Integrations
StackHawk HawkScan
Rapid7 InsightAppSec
Industries
StackHawk HawkScan
Rapid7 InsightAppSec
Regions
StackHawk HawkScan
Rapid7 InsightAppSec
Vendor
Company
StackHawk HawkScan
StackHawkRapid7 InsightAppSec
Rapid7Headquarters
StackHawk HawkScan
Denver, Colorado, USARapid7 InsightAppSec
Boston, Massachusetts, USACompany size
StackHawk HawkScan
51-200Rapid7 InsightAppSec
3,000+Founded
StackHawk HawkScan
2019Rapid7 InsightAppSec
2000