Item: Rapid7 AppSpider
Rating: 8
Author: Randy Varela

Use Cases and Deployment Scope

We have been using many Rapid 7 products in the long term, we do a lot of vulnerability assessments and analysis and our primary tool is Rapid7 Nexpose and InsightVM. Rapid 7 AppSpider complements our portfolio of services with the capability to allow us to perform web-based security testing in our customer DevOps cycle or directly on the production website with great info an analytics.

Pros and Cons

OWASP Top 10.
Crawling web applications.
Web application security testing.

Scan might be slow compared to other tools.
Not a lot of training on the vendor side.

Most Important Features

OWASP TOP 10
Pentesting
Authenticated Scan

Return on Investment

Great ROI for consultant projects.

Alternatives Considered

Rapid7 InsightVM, Rapid7 Managed Security Services (Rapid7 MDR) and Rapid7 Cybersecurity Advisory Services

Key Insights

Do you think Rapid7 AppSpider delivers good value for the price?

Yes

Are you happy with Rapid7 AppSpider's feature set?

Yes

Did Rapid7 AppSpider live up to sales and marketing promises?

Did implementation of Rapid7 AppSpider go as expected?

Yes

Would you buy Rapid7 AppSpider again?

Yes

Likelihood to Recommend

Rapid7 AppSpider could be your default DAST (Dynamic Application Security Testing), it covers the OWASP top 10 for web and APIs. Great tools, with a very nice and understandable report and analytics, work excellent for one-shot or continuous monitoring of your web assets. Also has a fair amount of integrations with other popular tools.

Great SAST Tool.

Overall Satisfaction with Rapid7 AppSpider