Just in case you weren't aware - this Checklist is adapted from the Sqreen SaaS CTO Security Checklist. Sqreen is a RASP that was recently acquired by Datadog. Keep in mind that potential bias before diving in too deep on the sales pitch!

We are experimenting with a couple of RASP providers, let me tell you that it does help with certain aspects (of finding issues) but it does not replace the other tooling we are already using.

So the costs / resources are not to be underestimated.

Good thing about many RASP solutions is that they integrate easily into our existing developers processes / tooling, so that's a big endorsement.