HCL AppScan Reviews & Product Details

HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools pinpoint application vulnerabilities, allowing for quick remediation in every phase of the software development lifecycle. Fast and Accurate Scanning for Secure DevOps Developers and DevOps teams can quickly and accurately scan code, applications, and APIs for security vulnerabilities while applications are being developed. This allows companies to fix issues at the earliest stages of the software development lifecycle, when it is least costly to the business. Focus on the Fix Continuous monitoring with IAST, along with auto issue correlation with DAST and SAST scan results allows DevOps teams to group and prioritize findings for faster, more streamlined remediation. Enterprise Management for Security Teams Centralized, easy-to-use dashboards provide visibility and oversight of all security scanning and remediation, and allow users to set scan parameters and compliance policies.

Seller

HCL Technologies

Discussions

HCL AppScan Community

Solution Type

All-in-One

Overview by

Alyson Kelly (Event Manager)

Used by Cognizant and 2 others

Beta

Pricing

Pricing provided by HCL AppScan.

HCL AppScan CodeSweep

Free

View More Pricing Information

HCL AppScan Integrations

(31)

Verified by HCL AppScan

Show More Integrations

G2 reviews are authentic and verified.

Here's how.

Verified User in Computer Software

Enterprise (> 1000 emp.)

7/22/2020

"User friendly and updated db of vulnerabilities"

5/5

What do you like best about HCL AppScan?

The most important I like about this is the IAST- Interactive application security testing is the best part which I like because it will crawl the application with us and get more chances to get more vulnerabilities as compare to DAST and SAST. SAST and DAST obviously these feature will do there best. Mobile application is also adding plus point which will make this tool as all rounder just like in cricket the player who knows batting, bowling, fielding and wicket keeping. This is the tool which added the advantage of all the things. Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

No support for the react js applications as it should have. which will improve appscan support Anyway it is having SAST, DAST, Mobile apps and IAST. which is best part of it. Review collected by and hosted on G2.com.

Recommendations to others considering HCL AppScan:

It's easier to use the HCL appscan as it provides SAST, DAST, Mobile app Security Testing and one most important is IAST which will help you to find more vulnerabilities Review collected by and hosted on G2.com.

What problems is HCL AppScan solving and how is that benefiting you?

DAST, SAST and Mobile application testing DAST - Dynamic Application which will help us to resolve the real life scenario SAST - Static scan will do the code review before deployment which will save time and money Mobile application - Now a days it's helping all of us to recognize the vulnerabilities in mobile. IAST - Interactive application security testing is the best part which I like because it will crawl the application with us and get more chances to get more vulnerabilities as compare to DAST and SAST Review collected by and hosted on G2.com.

Verified User in Automotive

Small-Business (50 or fewer emp.)

10/31/2020

"price/performance web application vulnerability"

4.5/5

What do you like best about HCL AppScan?

In report side, developers can understand details and solution method of vulnerability. On my side(security engineer) I have been tested AppScan with 2 other rival. The vulnerability analysis AppScan is doing is quite sufficient. In my review I think that was enough for OWASP TOP10 requirements. Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

User interface could be more colorful :) Review collected by and hosted on G2.com.

Verified User in Automotive

Enterprise (> 1000 emp.)

11/5/2020

"Most effective tool for Vulnerability Awareness"

4/5

What do you like best about HCL AppScan?

Vulnerability database always up to date and Also user friendly surface with effective reporting options Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

Global support response can be more faster. Review collected by and hosted on G2.com.

Verified User in Management Consulting

Enterprise (> 1000 emp.)

7/31/2020

"HCL Appscan User"

4/5

What do you like best about HCL AppScan?

The results of HCL AppScan are reliable and it's a very user friendly. Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

The cloud and On Prem version should work seamlessly. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Small-Business (50 or fewer emp.)

9/4/2019

"Awesome Security Application Scanner for Vulnerability Assessment"

5/5

What do you like best about HCL AppScan?

This one of best tool for Application scan to identify the flaws and remediation to fix the flaws in the application Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

Some time IBM Security AppScan provides false positive results Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

9/3/2019

"IBM Appscan for web application."

4.5/5

What do you like best about HCL AppScan?

IBM appscan is best for the webapplication here we can do both dynamic and static analyse Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

Sometime IBM app scan generate falsepositive results Review collected by and hosted on G2.com.

Verified User in Oil & Energy

Enterprise (> 1000 emp.)

7/30/2018

"Amazing Application Vulnerability Testing tool"

4/5

What do you like best about HCL AppScan?

IBM® Security AppScan Standard automates application security testing by scanning applications, identifying vulnerabilities, and generating reports with intelligent fix recommendations to ease remediation. It provides static and dynamic application security testing throughout development Review collected by and hosted on G2.com.

What do you dislike about HCL AppScan?

it doesn't have support for Oracle fusion middleware stack scanning which is a limitation and doesnt provide any support for SCA based application Review collected by and hosted on G2.com.

Recommendations to others considering HCL AppScan:

You can Test mobile apps and services with AppScan Standard. This is most suitable for mobile based organisation where the security is the key challenge and if the tool identifies all the vulnerabilities within the app deploy to the mobile platform it serves a boon to the mobile industry . Also it have wide variety of language support which makes it powerful to be utilized in the market making it better for any organisation to acquire this product for there deployment cycle before moving to the code to actual environment. It can integrate easiliy with CI/CD pipeline making is most suitable for organisation moving towards devops and hence i would like any organisation to think in a direction where secure environment is the key Review collected by and hosted on G2.com.

What problems is HCL AppScan solving and how is that benefiting you?

It gives all the vulnerability issues for our application making it infosec compliance and hence i would recommend it for each organisation to have a tool like this which provides best vulnerability testing tool today in the market Review collected by and hosted on G2.com.