Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Head-to-head · Application Security Testing

Checkmarx One vs Rapid7 InsightAppSec

  • Updated Oct 2026
  • Both researched from official sources
  • 2 checks side by side
Higher score Checkmarx One #3 in Application Security Testing 9.0/10 Pricing on request ✓ 0 of 2 features Visit Checkmarx
Rapid7 InsightAppSec #5 in Application Security Testing 8.8/10 Paid ✓ 1 of 2 features Visit Rapid7

Checkmarx One leads on 0 checks, Rapid7 InsightAppSec on 0, and 2 are even. Who comes out ahead on the 2 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreCheckmarx One · 9.0/10
  • Most featuresRapid7 InsightAppSec · 1 of 2

Checkmarx One scores higher on our rubric for application security testing: 9.0 against 8.8 out of 10; our editors rank them #3 and #5.

Checkmarx One is the better fit for enterprise teams prioritizing code security. Rapid7 InsightAppSec is the better fit for organizations buying authenticated web and API DAST.

  • Checkmarx One fits best

    Enterprise teams prioritizing code security

  • Rapid7 InsightAppSec fits best

    Organizations buying authenticated web and API DAST

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Checkmarx One 9.0/10 Visit ↗ Rapid7 InsightAppSec 8.8/10 Visit ↗
At a glance
Editor score 9.0 8.8
Ranking #3 in Application Security Testing #5 in Application Security Testing
Best for Enterprise teams prioritizing code security Organizations buying authenticated web and API DAST
Pricing model Paid Paid
Starting price Pricing on request $175/unit/mo
Free plan — —
Free trial — —
Deployment Cloud Cloud, Self-hosted, Browser extension
Platforms Web Web, Windows, Chrome extension
Support Docs Email, Tickets, Docs
Integrations 17 integrations 5 integrations
Built for Enterprise Mid-market, Enterprise
Features Checkmarx One 0/2 · Rapid7 InsightAppSec 1/2
SCA included Not checked yet Not checked yet
API testing Not checked yet ✓ (best)
Specs
Testing methods Not checked yet Not checked yet
Languages supported Not checked yet Not checked yet
CI/CD integrations Not checked yet Not checked yet
Deployment options Not checked yet Not checked yet
Our review
Pros
  • Scans source code in pull requests and decorates pull requests with findings.
  • Supports IDE plugins, CI/CD plugins and CLI-based pipeline integration.
  • Combines SAST, SCA, posture governance and AI-assisted triage and remediation.
  • Authenticated scanning supports automated login, Selenium, OAuth, and traffic files
  • 95+ attack types with Universal Translator and Attack Replay
  • Cloud or on-premises engines, REST API, and Jenkins build decisions
Cons
  • No permanently free plan is available.
  • Pricing is custom-quoted based on developer seats, applications and usage.
  • Cloud deployment and documentation support may not suit every team's requirements.
  • The published $175 price is per app per month with annual billing
  • There is no free plan for initial evaluation
  • Broad configuration and reporting may exceed basic scanning needs
Our verdict

Checkmarx One is a cloud-delivered application security platform for enterprise development teams that need to identify and manage vulnerabilities across software development. Its capabilities include static application security testing of…

Read the review →

Rapid7 InsightAppSec is a dynamic application security testing platform for security and application security teams managing modern web applications, single-page applications, APIs, and internal applications. It supports authenticated and…

Read the review →
  1. Checkmarx OneApplication Security Testing 9.0Pricing on request
  2. Rapid7 InsightAppSecApplication Security Testing 8.8Paid

Strengths and trade-offs

  • Checkmarx One — where it wins

    • Scans source code in pull requests and decorates pull requests with findings.
    • Supports IDE plugins, CI/CD plugins and CLI-based pipeline integration.
    • Combines SAST, SCA, posture governance and AI-assisted triage and remediation.

    Where it doesn't

    • No permanently free plan is available.
    • Pricing is custom-quoted based on developer seats, applications and usage.
    • Cloud deployment and documentation support may not suit every team's requirements.

  • Rapid7 InsightAppSec — where it wins

    • Authenticated scanning supports automated login, Selenium, OAuth, and traffic files
    • 95+ attack types with Universal Translator and Attack Replay
    • Cloud or on-premises engines, REST API, and Jenkins build decisions

    Where it doesn't

    • The published $175 price is per app per month with annual billing
    • There is no free plan for initial evaluation
    • Broad configuration and reporting may exceed basic scanning needs
  • Checkmarx One9.0/10 · Pricing on request

    Enterprise-focused SAST with pull-request, IDE, CI/CD, SCA and governance workflows.

    Visit CheckmarxFull verdict →
  • Rapid7 InsightAppSec8.8/10 · Paid

    A hybrid DAST platform with authenticated scanning, 95+ attack types, and CI/CD controls.

    Visit Rapid7Full verdict →

More comparisons

All application security testing comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated · How we research and update