--- title: HCL AppScan Reviews meta_title: 'HCL AppScan Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 76 reviews by the users' company size, role or industry to find out how HCL AppScan works for a business like yours. aggregate_rating: rating_value: 4.1 review_count: 76 scale: '5' date_modified: '2026-08-13' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # HCL AppScan Reviews **Vendor:** HCL Technologies **Category:** [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Average Rating:** 4.1/5.0 **Total Reviews:** 76 ## About HCL AppScan HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools pinpoint application vulnerabilities, allowing for quick remediation in every phase of the software development lifecycle. Fast and Accurate Scanning for Secure DevOps Developers and DevOps teams can quickly and accurately scan code, applications, and APIs for security vulnerabilities while applications are being developed. This allows companies to fix issues at the earliest stages of the software development lifecycle, when it is least costly to the business. Focus on the Fix Continuous monitoring with IAST, along with auto issue correlation with DAST and SAST scan results allows DevOps teams to group and prioritize findings for faster, more streamlined remediation. Enterprise Management for Security Teams Centralized, easy-to-use dashboards provide visibility and oversight of all security scanning and remediation, and allow users to set scan parameters and compliance policies. ## HCL AppScan Reviews ### 1. A tool a bit immature **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** December 21, 2022 **What do you like best about HCL AppScan?** It was easy to use AppScan on Cloud with the IDE plugin or maven one **What do you dislike about HCL AppScan?** The results may differ a lot based on the plugin used (IDE, maven, AppScanGo). Moreover, most of the results were false positive **What problems is HCL AppScan solving and how is that benefiting you?** SAST analysis of a mobile application and a maven project ### 2. Looking for better assistance **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** January 10, 2019 **What do you like best about HCL AppScan?** It helps to identify latest vulnerabilities **What do you dislike about HCL AppScan?** We can't relay solely on scanner results ,have to depend on manual testing as well **Recommendations to others considering HCL AppScan:** It doesn't help you to identify all vulnerabilities **What problems is HCL AppScan solving and how is that benefiting you?** It helps to identify vulnerabilities for any type of website in the development stage ### 3. It's okay **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** January 11, 2019 **What do you like best about HCL AppScan?** Integrates with other IBM software, pulls into siem and watson well **What do you dislike about HCL AppScan?** not as thorough or updated as others scanners, does not go as deep on network level **What problems is HCL AppScan solving and how is that benefiting you?** Realtime results to SOC instantly ## HCL AppScan Discussions - [Who owns AppScan?](https://www.g2.com/discussions/who-owns-appscan) - 1 comment - [Is AppScan free?](https://www.g2.com/discussions/is-appscan-free) - 1 comment - [View HCL AppScan pricing details and edition comparison](https://www.g2.com/products/hcl-appscan/reviews?filters%5Bnps_score%5D%5B%5D=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-13+15%3A54%3A44+-0500&secure%5Bsession_id%5D=83a9e5e2-757a-403d-a18a-3c7682aa4689&secure%5Btoken%5D=693186deec571a3da59c7cefbe272065d89b5e535e7cbf122523c9300d749eee&format=llm_user) ## HCL AppScan Features **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard ## Top HCL AppScan Alternatives - [Invicti](https://www.g2.com/products/invicti/reviews) - 4.5/5.0 (69 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) - 4.2/5.0 (44 reviews)