Try our new research platform with insights from 80,000+ expert users

Rapid7 InsightCloudSec vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Rapid7 InsightCloudSec
Ranking in Cloud Management
24th
Ranking in Cloud Security Posture Management (CSPM)
22nd
Average Rating
7.2
Reviews Sentiment
6.9
Number of Reviews
5
Ranking in other categories
Cloud-Native Application Protection Platforms (CNAPP) (17th)
Snyk
Ranking in Cloud Management
15th
Ranking in Cloud Security Posture Management (CSPM)
16th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
48
Ranking in other categories
Application Security Tools (5th), Static Application Security Testing (SAST) (8th), Container Security (6th), Software Composition Analysis (SCA) (2nd), Software Development Analytics (2nd), DevSecOps (2nd), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of August 2025, in the Cloud Management category, the mindshare of Rapid7 InsightCloudSec is 0.5%, up from 0.2% compared to the previous year. The mindshare of Snyk is 1.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Management
 

Featured Reviews

ChennaRao Vemula - PeerSpot reviewer
Enhances security posture with cost efficiency and powerful APIs
We have been using it for almost four years. We are one of the top first customers who implemented it. It's a cloud security solution With this tool, we have a neat security posture at least in terms of securing our environment. It helps us handle all the misconfigurations, and we do day-to-day…
meetharoon - PeerSpot reviewer
Affordable tool boosts code scanning efficiency but faces integration hurdles
The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Agentless scanning is a possible use with Rapid7 InsightCloudSec."
"ICSE is cheaper compared to other tools and has a pleasant user experience with good support."
"The tool's most valuable feature is workload protection for Kubernetes and container security. It has agents that identify bugs or lack of security on runtime containers."
"ICSE is cheaper compared to other tools and has a pleasant user experience with good support."
"The tool provides centralized visibility through dashboards and alerts, allowing customers to receive reports on cloud vulnerabilities and security posture. Rapid7 InsightCloudSec provides customers with a robust understanding of cloud security."
"I find the security frameworks and security tools valuable. I think they're good in the infrastructure of the code security. They are also good at threat protection."
"It runs every hour and has been reliable since I started."
"The most valuable feature of Snyk is the SBOM."
"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."
"The code scans on the source code itself were valuable."
"From a compliance and visibility reporting perspective, the fact that it can be applicable for multi-cloud environments is very helpful."
"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."
"We're loving some of the Kubernetes integration as well. That's really quite cool. It's still in the early days of our use of it, but it looks really exciting. In the Kubernetes world, it's very good at reporting on the areas around the configuration of your platform, rather than the things that you've pulled in. There's some good advice there that allows you to prioritize whether something is important or just worrying. That's very helpful."
"Snyk helps me pinpoint security errors in my code."
"Snyk allows for scaling across large organizations, accommodating tens of thousands of applications and over 60,000 repositories, making it suitable for wide-scale deployment."
 

Cons

"They didn't have any documentation on how to patch it."
"The login piece needs improvement."
"Technical support could be better. It could also be easier, more user-friendly, and intuitive. The API keys aren't easy to understand, and the cloud layouts aren't intuitive and user-friendly. We should be able to integrate IM governance and APIs into non-compliant workloads like legacy solutions."
"There are a lot of other solutions in the market, not only providing the features of a CSPM, but also CNAPP."
"Rapid7 InsightCloudSec could be better at showing dashboards for virtual firewalls and appliances. Compared to other solutions like Palo Alto, this area is not as good. So, they should work on improving this for virtual devices."
"A couple of modules are missing when compared to other providers, specifically related to some IAM, and the login piece needs improvement."
"The tool needs to improve its documentation."
"We tried to integrate it into our software development environment but it went really badly. It took a lot of time and prevented the developers from using the IDE. Eventually, we didn't use it in the development area... I would like to see better integrations to help the developers get along better with the tool. And the plugin for the IDE is not so good. This is something we would like to have..."
"Generating reports and visibility through reports are definitely things they can do better."
"The tool should provide more flexibility and guidance to help us fix the top vulnerabilities before we go into production."
"For the areas that they're new in, it's very early stages for them. For example, their expertise is in looking at third-party components and packages, which is their bread-and-butter and what they've been doing for ages, but for newer features such as static analysis I don't think they've got compatibility for all the languages and frameworks yet."
"The way Snyk notifies if we have an issue, there are a few options: High vulnerability or medium vulnerability. The problem with that is high vulnerabilities are too broad, because there are too many. If you enable notifications, you get a lot of notifications, When you get many notifications, they become irrelevant because they're not specific. I would prefer to have control over the notifications and somehow decide if I want to get only exploitable vulnerabilities or get a specific score for a vulnerability. Right now, we receive too many high vulnerabilities. If we enable notifications, then we just get a lot of spam message. Therefore, we would like some type of filtering system to be built-in for the system to be more precise."
"It would be great if they can include dynamic, interactive, and run-time scanning features. Checkmarx and Veracode provide dynamic, interactive, and run-time scanning, but Snyk doesn't do that. That's the reason there is more inclination towards Veracode, Checkmarx, or AppScan. These are a few tools available in the market that do all four types of scanning: static, dynamic, interactive, and run-time."
"Compatibility with other products would be great."
"The log export function could be easier when shipping logs to other platforms such as Splunk."
 

Pricing and Cost Advice

"We're doing an annual subscription. There are additional expenses, but not within the confines of this platform."
"Companies generally buy this tool because the pricing is not that high."
"It's good value. That's the primary thing. It's not cheap-cheap, but it's good value."
"Cost-wise, it's similar to Veracode, but I don't know the exact cost."
"Presently, my company uses an open-source version of the solution. The solution's pricing can be considered quite reasonable owing to the features they offer."
"Snyk is a premium-priced product, so it's kind of expensive. The big con that I find frustrating is when a company charges extra for single sign-on (SSO) into their SaaS app. Snyk is one of the few that I'm willing to pay that add-on charge, but generally I disqualify products that charge an extra fee to do integrated authentication to our identity provider, like Okta or some other SSO. That is a big negative. We had to pay extra for that. That little annoyance aside, it is expensive. You get a lot out of it, but you're paying for that premium."
"With Snyk, you get what you pay for. It is not a cheap solution, but you get a comprehensiveness and level of coverage that is very good. The dollars in the security budget only go so far. If I can maximize my value and be able to have some funds left over for other initiatives, I want to do that. That is what drives me to continue to say, "What's out there in the market? Snyk's expensive, but it's good. Is there something as good, but more affordable?" Ultimately, I find we could go cheaper, but we would lose the completeness of vision or scope. I am not willing to do that because Snyk does provide a pretty important benefit for us."
"You can get a good deal with Snyk for pricing. It's a little expensive, but it is worth it."
"The product has good pricing."
"Pricing-wise, it is not expensive as compared to other tools. If you have a couple of licenses, you can scan a certain number of projects. It just needs to be attached to them."
report
Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Insurance Company
10%
Computer Software Company
9%
Retailer
7%
Financial Services Firm
15%
Computer Software Company
13%
Manufacturing Company
9%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Rapid7 InsightCloudSec?
The tool provides centralized visibility through dashboards and alerts, allowing customers to receive reports on cloud vulnerabilities and security posture. Rapid7 InsightCloudSec provides customer...
What is your experience regarding pricing and costs for Rapid7 InsightCloudSec?
The pricing is good when compared to other leaders. It is cheaper.
What needs improvement with Rapid7 InsightCloudSec?
A couple of modules are missing when compared to other providers, specifically related to some IAM, and the login piece needs improvement.
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
 

Also Known As

DivvyCloud
Fugue
 

Overview

 

Sample Customers

Fannie Mae, 3M, PizzaHut, Spotify, Autodesk, Discovery
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Rapid7 InsightCloudSec vs. Snyk and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.