# How much tuning did HCL AppScan IFA take to reduce noise without losing useful findings?

We like having HCL AppScan as a common platform for dynamic scanning across web and mobile apps, with custom configurations that help shift security earlier in the development cycle and reduce tool-hopping. The main challenge has been configuration and understanding how much Intelligent Finding Analytics tuning actually improves noise reduction, since false positive rates before and after tuning are not clear. We also want clearer details on integration boundaries and operational controls (like APIs, auth, protocols, and data retention). How have you approached IFA rule tuning and measuring triage improvements in your environment?

##### Post Metadata
- Posted at: 16 days ago
- Author title: Technology Planning for Transport Networks 
- Net upvotes: 2


## Comments
### Comment 1

In my case it took a couple of weeks to get the first rule-set into a usable state because the default profile produced hundreds of false positives and we lost trust in the report early. I ended up tightening our framework helpers and rerunning scans until the remaining findings could be validated by hand. Once tuned, the OWASP-based rule-sets plus authenticated dynamic scans (replaying recorded logins) helped surface issues behind the session wall, and each finding exported cleanly as a ticket with file path, severity, and data flow trace.

##### Comment Metadata
- Posted at: 13 days ago
- Author title: Data Engineer at Equifax Chile S.A.




## Related Product
[HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews)

## Related Category
[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: over 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: over 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: over 13 years ago
  - Comments: 4