No more typing reviews! Try our Samantha, our new voice AI agent.

CucumberStudio vs Rapid7 InsightAppSec comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CucumberStudio
Ranking in Dynamic Application Security Testing (DAST)
12th
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Rapid Application Development Software (25th)
Rapid7 InsightAppSec
Ranking in Dynamic Application Security Testing (DAST)
3rd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
21
Ranking in other categories
AI Observability (22nd)
 

Mindshare comparison

As of November 2026, in the Dynamic Application Security Testing (DAST) category, the mindshare of CucumberStudio is 1.8%, up from 0.4% compared to the previous year. The mindshare of Rapid7 InsightAppSec is 5.5%, up from 5.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Dynamic Application Security Testing (DAST) Mindshare Distribution
ProductMindshare (%)
Rapid7 InsightAppSec5.5%
CucumberStudio1.8%
Other92.7%
Dynamic Application Security Testing (DAST)
 

Featured Reviews

Walter Wirch - PeerSpot reviewer
Technical Expert at Bertelsmann SE & Co.
Facilitates integration of test scenarios while needing modernization of components
CucumberStudio is primarily used for designing test scenarios and automating testing. We have implemented it in conjunction with our own routines for integration into our infrastructure CucumberStudio aligns with our strategy for data-driven testing. It supports our product owners in designing…
Brandi Lea - PeerSpot reviewer
Regional Information Security Analyst, Lead at a healthcare company with 10,001+ employees
Rapid risk detection has transformed how I uncover hidden vulnerabilities in new applications
Rapid7 InsightAppSec offers excellent features including a cloud-based platform that allows for detailed breakdowns of information into more digestible bits. The platform is user-friendly with a broad range of tools, although it does require quite a bit of a learning curve. It allows me to aggregate data and put it into presentations to send to executives about the security status across the entire enterprise. My favorite aspect of the user-friendly interface of Rapid7 is the primary cloud-based dashboard, which I find most useful. I love that even inside a browser, the intuitive help options are available for figuring out what things are, whether it's hovering over a particular option for insights or using right-click features that offer tools and tips on managing the vulnerabilities when found. The interface is very clean, not overly convoluted or difficult to navigate, which I do enjoy. Rapid7 has positively impacted my organization by allowing me to discover vulnerabilities, both publicly known and zero-day, much faster and efficiently than I ever did in the past, ultimately saving the company a lot of money in compliance issues, fines, and possibly even lawsuits. The number of vulnerabilities I am discovering has improved by almost thirty seven percent in the last two years alone. Remediation especially has increased significantly because I am finding these vulnerabilities faster, and Rapid7 provides tips on how to remediate or harden against them, whether through hardening options or upgrading to better versions, which does save the company money.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Scenarios, since is a really easy way to create and control your test cases."
"The URL is very useful, and it has a very good UI for deploying information of the scenarios created."
"The power of Hiptest is its test cases and campaign management."
"Integration with automation frameworks, keywords, and tags allows for saving time writing test cases and implementing automation."
"The most valuable feature is the re-usability of action words."
"Hiptest is a great test management tool for agile teams."
"Hiptest allowed us to clean up our test campaigns and standardize the way we write test cases and structure our BDD approach."
"CucumberStudio aligns with our strategy for data-driven testing."
"Customers use the product for scanning purposes and do not want to be restricted with respect to the number of scans they perform."
"I would rate the technical support from Rapid7 a ten, indicating high-quality support."
"If a company needs an effective product for web scanning, I can recommend this product."
"It uses a signature-based method to check for problems with your code and will provide an alert if anything is found."
"It's very easy to use and user-friendly, and it does the job."
"You have various attack modules, and you also have the Attack Replay feature for the attack sequence. You can reproduce an attack and see it. That is a very good feature I noticed in this solution. It helps developers as well."
"The solution is stable."
"The templates feature is very easy; you just choose the kind of attack you want on your web application, and you run it against that template and receive a report, which is great."
 

Cons

"Copy-pasting something directly from JIRA requires too much modification and formatting."
"Support with In-App chat is great. However, it would be awesome to have real time support also for PT timezone."
"CucumberStudio's API integration could be improved both in terms of reliability and design."
"Another kind of deployment might be useful, perhaps an option to install the tool in a local deployment."
"I would like to see better customer support."
"It needs some improvement when exporting scenarios into automation code, to make it easier to manage the repeatable action words and tests."
"The reporting and metrics can be improved. E.g.: If we wanted to have metrics across all projects."
"A key area for improvement is to revamp outdated components such as HipTest publisher."
"The only concern I have with Rapid7 is that it does not provide enough information about vulnerabilities within AppSec."
"In the future, if they can have integration with a lot of ticketing systems then it would be amazing."
"When you add new projects for the same product, it either duplicates or replaces the scan configuration. If I run a scan for the same product with a different scan configuration, it should keep the previous scan configuration and not replace it with the new scan configuration. It should just add the new scan configuration. That would be helpful. They do keep the results as it is, but the scan configuration keeps changing. For example, I have set a scan configuration to a full scan, and next week, I want to run a new scan for the same product with some changes or new functionalities. I want to run a partial scan. Currently, if I change the scan configuration to partial, it changes the old one also to partial. That should be improved."
"The product’s pricing could be flexible."
"The reporting feature of Rapid7 InsightAppSec needs improvement as it currently provides basic reports."
"I required a solution to manage on-premises, but I was not as satisfied as expected."
"The reporting is definitely an aspect of the solution that's in need of some work."
"The reporting is definitely an aspect of the solution that's in need of some work. We found that we'd try to use widgets, but often getting them to work for us wasn't very clear. They need to be more user friendly or offer better instructions."
 

Pricing and Cost Advice

Information not available
"The price of this product is very cheap."
"Its price is competitive. It is not expensive."
"I rate Rapid7 InsightAppSec’s pricing an eight out of ten."
"Rapid7 InsightAppSec is cheap."
"They offer a good price, but I don't remember its cost. It is fair as compared to the competition. We have opted for project-based licensing, not user-based. We can add any number of users. That doesn't matter. It is worth the money."
"I'm not sure how much it costs exactly, but I know it's expensive."
report
Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
20%
Construction Company
15%
Financial Services Firm
10%
Manufacturing Company
10%
Manufacturing Company
16%
Financial Services Firm
10%
Construction Company
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise4
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise6
 

Questions from the Community

What needs improvement with Hiptest?
CucumberStudio's API integration could be improved both in terms of reliability and design. The API requires data to be sent in a specific format, which takes time to build. Additionally, the repor...
What is your primary use case for Hiptest?
I use CucumberStudio as a test case repository. All of our test cases are stored there. It is also part of our test planning process. For every sprint, we plan the test cases in CucumberStudio and ...
What advice do you have for others considering Hiptest?
For teams following a BDD style software development approach, CucumberStudio is a great collaborative tool that covers all the basic requirements of a test management tool. I would rate CucumberSt...
What needs improvement with Rapid7 InsightAppSec?
While Rapid7 InsightAppSec is getting better with each update or version, it needs to enhance its zero-day detection for anomalous things without relying on third-party solutions like Vericode. Hav...
What is your primary use case for Rapid7 InsightAppSec?
My main use case for Rapid7 is onboarding all new applications both built in house and third party acquired, where I run them through a sandbox environment and allow Rapid7 to conduct an initial sc...
What advice do you have for others considering Rapid7 InsightAppSec?
If you are looking for a solution that will help identify vulnerabilities and provide remediation tips for hardening your infrastructure, I think Rapid7 does an excellent job. While I do not know t...
 

Also Known As

Hiptest
InsightAppSec
 

Overview

 

Sample Customers

Cisco, Cardinal Health, Intuit, Smartbox, Accenture, Deliveroo
CenterPoint Energy, CPA Australia, Hypertherm, First American Financial Corporation, Rackspace
Find out what your peers are saying about CucumberStudio vs. Rapid7 InsightAppSec and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.