Imperva Application Security Platform vs Rapid7 AppSpider comparison

Why PeerSpot?

The compared Imperva and Rapid7 solutions aren't in the same category. Imperva is ranked #4 in DDOS , with an average rating of 8.7, and holds a 7.7% mindshare in the category. Rapid7 is ranked #31 in SAST , and holds a 0.8% mindshare. Additionally, 95% of Imperva users are willing to recommend the solution, compared to 100% of Rapid7 users who would recommend it.

Imperva Application Securit...

Read 147 Imperva Application Security Platform reviews

21,353 Views
7,260 Comparison Views

95% willing to recommend

Rapid7 AppSpider

Read 14 Rapid7 AppSpider reviews

2,642 Views
1,823 Comparison Views

100% willing to recommend

Imperva Application Securit...

Rapid7 AppSpider

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Imperva Application Security Platform and Rapid7 AppSpider based on real PeerSpot user reviews.

Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection.

To learn more, read our detailed Distributed Denial-of-Service (DDoS) Protection Report (Updated: September 2026).

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

September 2026

Download the complete report

Helped 913,806 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Imperva Application Securit...

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

147

Ranking in other categories

CDN (2nd), Web Application Firewall (WAF) (1st), Distributed Denial-of-Service (DDoS) Protection (4th), Bot Management (1st), API Security (1st)

Rapid7 AppSpider

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (31st)

Mindshare comparison

Imperva Application Security Platform and Rapid7 AppSpider aren’t in the same category and serve different purposes. Imperva Application Security Platform is designed for Distributed Denial-of-Service (DDoS) Protection and holds a mindshare of 7.7%, up 7.3% compared to last year.
Rapid7 AppSpider, on the other hand, focuses on Static Application Security Testing (SAST), holds 0.8% mindshare, up 0.5% since last year.

Distributed Denial-of-Service (DDoS) Protection Mindshare Distribution
Product	Mindshare (%)
Imperva Application Security Platform	7.7%
Cloudflare	11.9%
Radware DDoS	6.4%
Other	74.0%

Distributed Denial-of-Service (DDoS) Protection

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Rapid7 AppSpider	0.8%
SonarQube	12.7%
Checkmarx One	8.3%
Other	78.2%

Static Application Security Testing (SAST)

Featured Reviews

reviewer2818155

Senior Associate at a tech vendor with 10,001+ employees

Application protection has improved and reporting and dashboards still need refinement

I believe Imperva Application Security Platform should have a more interactive wizard. While the dashboard is good, it could be more eye-catching. Based on my perspective, I recommend modifying the dashboards, especially the main dashboard where I can see the traffic hit count, alerts, and other latest information. In terms of reporting, I find it challenging to create reports; in my earlier days, it was difficult. Over time, I have learned how to create reports, but it should be easier to do so. I have used other tools such as firewalls or SolarWinds, where creating a report is straightforward and does not take much time, unlike in Imperva, where I have to add many elements. Modifications in the integration aspects would also be beneficial.

Read full review

Hiroshi Watanabe

Marketing Expert at J's communication

Clients benefit from broad authentication and effective crawling but need localization improvements

Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization.…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution offers good security against a variety of web attacks, and the protection from DDoS attacks is very useful."

"Human contact Fast SLA Trustworthy and excellent communication Highly-functional back office with user friendly reports and intelligence on bad IPS and malicious software is at very high level and very quick."

"I would encourage people to implement Imperva Incapsula, as it is a very mature, easy to use, and reliable solution."

"I was involved in the deployment and found that all the features in this product are fantastic, especially the correlated attack validation, threat radar (reputation, fraud), and virtual patching."

"I would highly recommend Imperva Incapsula especially for customers who want extra security for their web presence."

"Imperva Application Security Platform has positively impacted my organization by making the website more secure."

"By using this application, the firewall is blocking every suspicious activity and event, and now we are safe with peace of mind that nobody will use malware on us or try to hack our website."

"Gives us the ability to trace each connection, and to have logs to be able to differentiate between a positive and a false-positive intruder action."

More Imperva Application Security Platform pros

"It scans all the components developed within a web application."

"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."

"The entire solution is interactive and has a point-and-click user experience, which makes it easy to find items or drill down on information, and you don't need specialized skills to use the product."

"This solution is a leader in the industry."

"One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization."

"I would say that it is stable, as I am not aware of any major issues."

"Rapid7 AppSpider is good at managing different applications. It uses applets and generates reports to cover the PCA/GDPR compliance requirements."

"The initial deployment is very straightforward and simple. The product is stable if configured properly."

More Rapid7 AppSpider pros

Cons

"Caching rules are really basic now and lots of space for improvement here."

"Sometimes our web application firewall will slow down."

"Communication declined a bit as they got bigger – 7/10."

"The main reason it is not a perfect ten is regarding support. At times, having to reach the support team takes eight hours to ten hours maximum."

"I loved the approach of the cloud. The cloud has a lot of new features, like advanced web protection and DDoS protection. If those could also be on-boarded onto the on-prem versions, that would be ideal. They need to pay attention to both deployment options and not just favor one."

"The initial setup could be simplified. Every time you have to install the solution you have to get in touch with support or somebody that can to do that for you."

"It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."

"The cost could be lower; our end clients need to have a high budget to purchase this solution."

More Imperva Application Security Platform cons

"AppSpider has some problems with the RAM needed while scanning."

"AppSpider could improve in the area of integration. They need to add more integration opportunities."

"The documentation about integration with AppSpider is bad news and some integrations are quite difficult to do right now."

"For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users."

"Integration could be better."

"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."

"The solution is too slow. It could take a full day to scan. Competitors are much faster."

"There are some glitches with stability, and it is an area for improvement."

More Rapid7 AppSpider cons

Pricing and Cost Advice

"The price of this solution is a little bit high compared to competitors."

"Although the pricing can be a little high, it is worth the protection and security that it offers."

"The solution's price is high for small companies."

"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."

"The price of Imperva Web Application Firewalls is expensive compared to others."

"The cost of this solution depends on the platform."

"The tool is expensive."

"It is expensive."

More Imperva Application Security Platform pricing and cost advice

"The licensing cost depends on the number of users."

"The price is pretty fair."

"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."

"AppSpider is closed-source software and you need to acquire a license in order to use it."

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."

See which vendors are best for you

Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.

See recommendations

913,806 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Financial Services Firm

11%

Construction Company

Manufacturing Company

12%

University

10%

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	88
Midsize Enterprise	25
Large Enterprise	70

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	2
Large Enterprise	1

Questions from the Community

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot management.

See all answers

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provided. I would rate the pricing of Imperva DDoS as five, where one is very cheap a...

See all answers

What needs improvement with Imperva DDoS?

I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise. For example, the initiation of an attack on the endpoint level cou...

See all answers

What is your experience regarding pricing and costs for Rapid7 AppSpider?

The price is not high, but for Japanese customers, localization may incur additional costs.

See all answers

What needs improvement with Rapid7 AppSpider?

For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users.

See all answers

What is your primary use case for Rapid7 AppSpider?

Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments.

See all answers

Comparisons

Cloudflare vs Imperva Application Security Platform

Compared 8% of the time

Akamai vs Imperva Application Security Platform

Compared 5% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 3% of the time

Link11 vs Imperva Application Security Platform

Compared 3% of the time

Fastly vs Imperva Application Security Platform

Compared 3% of the time

More Imperva Application Security Platform Competitors

OWASP Zap vs Rapid7 AppSpider

Compared 11% of the time

Checkmarx One vs Rapid7 AppSpider

Compared 11% of the time

F5 BIG-IP Local Traffic Manager (LTM) vs Rapid7 AppSpider

Compared 6% of the time

SonarQube vs Rapid7 AppSpider

Compared 6% of the time

HCL AppScan vs Rapid7 AppSpider

Compared 6% of the time

More Rapid7 AppSpider Competitors

Product Reports

Buyer's Guide

Imperva Application Security Platform

September 2026

Imperva Application Security Platform report

Download Imperva Application Security Platform product report

Buyer's Guide

Rapid7 AppSpider

September 2026

Download Rapid7 AppSpider product report

Also Known As

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

AppSpider

Overview

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Rapid7 AppSpider provides rapid vulnerability detection and comprehensive reporting, integrating seamlessly with development cycles to enhance web application security. It is widely recognized for its detailed remediation steps and compliance with international standards like ISO27001.

Renowned for its robust security assessment capabilities, Rapid7 AppSpider stands out by offering advanced crawling technology and interactive interface features. Despite its slower performance compared to some competitors, it efficiently manages applications with configurable reporting and a focus on reducing false positives. Users find its automation and extensive integration capabilities valuable, although they indicate a need for improved interface enhancements and better report localization for specific regions like Japan.

What are the key features of Rapid7 AppSpider?

Rapid Vulnerability Detection: Quickly identifies security issues within applications.
Comprehensive Reporting: Offers detailed, configurable reports for thorough analysis.
International Compliance: Aligns with standards such as ISO27001 for security assurance.
Extensive Integration: Integrates with various software development life cycles.
Interactive Interface: User-friendly design enhances ease of use and engagement.
Automation: Streamlines processes with automated scanning capabilities.
Portability: Easily managed across different environments and platforms.

What benefits should be considered when evaluating Rapid7 AppSpider?

Detailed Remediation Steps: Provides guidance on addressing identified vulnerabilities.
Low False Positives: Ensures higher accuracy in scan results.
Compliance Control: Helps maintain adherence to security standards and regulations.
API Auditing Capabilities: Extensive checks on web application interfaces.
Comprehensive Reports: Detailed documentation aids in security decision-making.

In sectors such as finance, healthcare, and technology, companies leverage Rapid7 AppSpider to enhance their security management. It plays an integral role in vulnerability assessment processes, aiding in the compliance with international security standards and reforms in security testing strategies, especially during auditing and routine application scans.

Rapid7

Sample Customers

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Microsoft

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

September 2026

Download Free Report

Find out what your peers are saying about Radware, Cloudflare, NETSCOUT and others in Distributed Denial-of-Service (DDoS) Protection. Updated: September 2026.

DOWNLOAD NOW

913,806 professionals have used our research since 2012.

We monitor all Distributed Denial-of-Service (DDoS) Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.