Rapid7's offering earned the highest rating for Web AST due to DAST features. These include its "universal translator," which enables testing of various types of exposed back-end interfaces, such as JSON, REST, SOAP, XML-RPC, Google Web Toolkit (GWT) RPC and Action Message Format (AMF). These features also include its enterprise capabilities — enterprise console, RBAC, one-click vulnerability verification, bug-tracking integration and extensive WAF integration.

- Gartner, Critical Capabilities for Application Security Testing, Joseph Feiman, Neil MacDonald, August 17, 2015