--- title: HCL AppScan Reviews meta_title: 'HCL AppScan Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 76 reviews by the users' company size, role or industry to find out how HCL AppScan works for a business like yours. aggregate_rating: rating_value: 4.1 review_count: 76 scale: '5' date_modified: '2026-07-28' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # HCL AppScan Reviews **Vendor:** HCL Technologies **Category:** [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Average Rating:** 4.1/5.0 **Total Reviews:** 76 ## About HCL AppScan HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools pinpoint application vulnerabilities, allowing for quick remediation in every phase of the software development lifecycle. Fast and Accurate Scanning for Secure DevOps Developers and DevOps teams can quickly and accurately scan code, applications, and APIs for security vulnerabilities while applications are being developed. This allows companies to fix issues at the earliest stages of the software development lifecycle, when it is least costly to the business. Focus on the Fix Continuous monitoring with IAST, along with auto issue correlation with DAST and SAST scan results allows DevOps teams to group and prioritize findings for faster, more streamlined remediation. Enterprise Management for Security Teams Centralized, easy-to-use dashboards provide visibility and oversight of all security scanning and remediation, and allow users to set scan parameters and compliance policies. ## HCL AppScan Reviews ### 1. APPSCAN covers the needs for all scan modes **Rating:** 5.0/5.0 stars **Reviewed by:** Arnaud B. | Dirigeant Fondateur, Small-Business (50 or fewer emp.) **Reviewed Date:** January 23, 2022 **What do you like best about HCL AppScan?** APPSCAN is the best tool fast to use and get results at the right level of analysis. The user can quickly request the scans with a limited exploration or a deep and accurate one, as well as a specific security rule. The fact that Inteligent Analyses are supplied it save time for the Security Engineers during the triage, as well as for the developpers who have the Fix Group feature to quickly identify where to do the corrections to resolve several vulnerabilities with few source code modifications. **What do you dislike about HCL AppScan?** APPSCAN is mostly installable under Windows with SQL SERVER, except the Static scanner, available on all platforms. But HCL already supplied some containerized parts that introduced a game-changer for the installation. **Recommendations to others considering HCL AppScan:** If you develop applications and you are considering APPSCAN then you are about to get benefit on 2 goals, i.e. a fast and accurate solution for the Security Team and a good and automated DevSecOps by integrating APPSCAN within the development environment. **What problems is HCL AppScan solving and how is that benefiting you?** APPSCAN is very efficient in scanning all types of applications, Web or Desktop or embedded code. It covers the needs of these different types of applications thanks to several features Dynamic /DAST, Static / SAST, Interactive / IAST, and Open Source / SCA. These features are available under SaaS in HCL Clouds and also On-Premise, and both have a dashboard to consolidate the issues per business risks and moderate the issues as well as track the resolution. ### 2. One of the best solution for VA/PT activities **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Gambling & Casinos | Enterprise (> 1000 emp.) **Reviewed Date:** October 08, 2021 **What do you like best about HCL AppScan?** The solution is logic and the GUI is intuitive to use **What do you dislike about HCL AppScan?** According to my opinion there are no dislike points to notify **Recommendations to others considering HCL AppScan:** We compared it with Fortify web inspect, both of them are valid solution, choose the one you feel better **What problems is HCL AppScan solving and how is that benefiting you?** We use it to perform SAST and DAST analysis of web and mobile app, later we send the remediation plan to the development business unit ### 3. Hcl appscan **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** February 14, 2022 **What do you like best about HCL AppScan?** Great to have tool for appsec.really covers all vulnerabilities in DAST with less false positive.pluse setting up the solution is super easy. **What do you dislike about HCL AppScan?** Sometime solution goes in session detection problem that should be fixed. **What problems is HCL AppScan solving and how is that benefiting you?** Application Penetration testing ### 4. Best Tools for application testing **Rating:** 4.5/5.0 stars **Reviewed by:** Pratap K. | Information Security Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** April 25, 2021 **What do you like best about HCL AppScan?** User-friendly application, the best tool for find vulnerability and application testing **What do you dislike about HCL AppScan?** this tool take some Time to scan any web application **What problems is HCL AppScan solving and how is that benefiting you?** It is beneficial for any organization to secure web application, find the vulnerability and patch it accordingly ### 5. HCL Appscan Standard Not a Great DAST Tool to be used for 2FA MFA Applications **Rating:** 2.5/5.0 stars **Reviewed by:** Jyoti B. | Specialist Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** April 13, 2021 **What do you like best about HCL AppScan?** Easy Navigation & configuration of scan policies etc **What do you dislike about HCL AppScan?** Reported false positive are high in numbers which lets lot of manual work **What problems is HCL AppScan solving and how is that benefiting you?** no benefits I feel its big waste product I say only HCL appscan Standard DAST tool ### 6. User friendly and updated db of vulnerabilities **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** July 22, 2020 **What do you like best about HCL AppScan?** The most important I like about this is the IAST- Interactive application security testing is the best part which I like because it will crawl the application with us and get more chances to get more vulnerabilities as compare to DAST and SAST. SAST and DAST obviously these feature will do there best. Mobile application is also adding plus point which will make this tool as all rounder just like in cricket the player who knows batting, bowling, fielding and wicket keeping. This is the tool which added the advantage of all the things. **What do you dislike about HCL AppScan?** No support for the react js applications as it should have. which will improve appscan support Anyway it is having SAST, DAST, Mobile apps and IAST. which is best part of it. **Recommendations to others considering HCL AppScan:** It's easier to use the HCL appscan as it provides SAST, DAST, Mobile app Security Testing and one most important is IAST which will help you to find more vulnerabilities **What problems is HCL AppScan solving and how is that benefiting you?** DAST, SAST and Mobile application testing DAST - Dynamic Application which will help us to resolve the real life scenario SAST - Static scan will do the code review before deployment which will save time and money Mobile application - Now a days it's helping all of us to recognize the vulnerabilities in mobile. IAST - Interactive application security testing is the best part which I like because it will crawl the application with us and get more chances to get more vulnerabilities as compare to DAST and SAST ### 7. price/performance web application vulnerability **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Automotive | Small-Business (50 or fewer emp.) **Reviewed Date:** October 31, 2020 **What do you like best about HCL AppScan?** In report side, developers can understand details and solution method of vulnerability. On my side(security engineer) I have been tested AppScan with 2 other rival. The vulnerability analysis AppScan is doing is quite sufficient. In my review I think that was enough for OWASP TOP10 requirements. **What do you dislike about HCL AppScan?** User interface could be more colorful :) **What problems is HCL AppScan solving and how is that benefiting you?** Basically, I'm scanning the web application vulnerabilities with AppScan. It's great to be automating it compared to a manual scan. ### 8. Most effective tool for Vulnerability Awarness **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Automotive | Enterprise (> 1000 emp.) **Reviewed Date:** November 05, 2020 **What do you like best about HCL AppScan?** Vulnerability database always up to date and Also user friendly surface with effective reporting options **What do you dislike about HCL AppScan?** Global support response can be more faster. **What problems is HCL AppScan solving and how is that benefiting you?** Vulnerability assesment for new or existing software .Also sometimes I detected bugs on custom reporting area. ### 9. HCL Appscan User **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Management Consulting | Enterprise (> 1000 emp.) **Reviewed Date:** July 31, 2020 **What do you like best about HCL AppScan?** The results of HCL AppScan are reliable and it's a very user friendly. **What do you dislike about HCL AppScan?** The cloud and On Prem version should work seamlessly. **What problems is HCL AppScan solving and how is that benefiting you?** It helped us consolidated multiple security tools being used at my org. ### 10. Awesome Security Application Scanner for Vulnerability Assessment **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** September 04, 2019 **What do you like best about HCL AppScan?** This one of best tool for Application scan to identify the flaws and remediation to fix the flaws in the application **What do you dislike about HCL AppScan?** Some time IBM Security AppScan provides false positive results **What problems is HCL AppScan solving and how is that benefiting you?** IBM Security AppScan scannes the application and finds the vulnerability, and remediation steps to mitigates the vulnerability. ### 11. IBM Appscan for web application. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** September 03, 2019 **What do you like best about HCL AppScan?** IBM appscan is best for the webapplication here we can do both dynamic and static analyse **What do you dislike about HCL AppScan?** Sometime IBM app scan generate falsepositive results **Recommendations to others considering HCL AppScan:** Yes i recommend others to use IBM appscan for penetration testing. **What problems is HCL AppScan solving and how is that benefiting you?** With IBM app scan we are preforming automation scan for the web applications ### 12. Amazing Application Vulnerbility Testing tool **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Oil & Energy | Enterprise (> 1000 emp.) **Reviewed Date:** July 30, 2018 **What do you like best about HCL AppScan?** IBM® Security AppScan Standard automates application security testing by scanning applications, identifying vulnerabilities, and generating reports with intelligent fix recommendations to ease remediation. It provides static and dynamic application security testing throughout development **What do you dislike about HCL AppScan?** it doesn't have support for Oracle fusion middleware stack scaning which is a limitation and doesnt provide any support for SCA based application **Recommendations to others considering HCL AppScan:** You can Test mobile apps and services with AppScan Standard. This is most suitable for mobile based organisation where the security is the key challenge and if the tool identifies all the vulnerabilities within the app deploy to the mobile platform it serves a boon to the mobile industry . Also it have wide variety of language support which makes it powerful to be utilized in the market making it better for any organisation to acquire this product for there deployment cycle before moving to the code to actual environment. It can integrate easiliy with CI/CD pipeline making is most suitable for organisation moving towards devops and hence i would like any organisation to think in a direction where secure environment is the key **What problems is HCL AppScan solving and how is that benefiting you?** It gives all the vulnerability issues for our application making it infosec compliance and hence i wou ld recommend it for each organisation to have a tool like this which provides best vulnerability testing tool today in the market ### 13. Looking for better assistance **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** January 10, 2019 **What do you like best about HCL AppScan?** It helps to identify latest vulnerabilities **What do you dislike about HCL AppScan?** We can't relay solely on scanner results ,have to depend on manual testing as well **Recommendations to others considering HCL AppScan:** It doesn't help you to identify all vulnerabilities **What problems is HCL AppScan solving and how is that benefiting you?** It helps to identify vulnerabilities for any type of website in the development stage ### 14. It's okay **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** January 11, 2019 **What do you like best about HCL AppScan?** Integrates with other IBM software, pulls into siem and watson well **What do you dislike about HCL AppScan?** not as thorough or updated as others scanners, does not go as deep on network level **What problems is HCL AppScan solving and how is that benefiting you?** Realtime results to SOC instantly ### 15. Great app security tool for protection against web applications **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** July 13, 2018 **What do you like best about HCL AppScan?** Powerful scanning engine. A robust set of options. Excellent documentation. **What do you dislike about HCL AppScan?** True enterprise management, requires the purchase of additional AppScan products. **Recommendations to others considering HCL AppScan:** Its a great product to use even though it might be a bit pricey for general startups **What problems is HCL AppScan solving and how is that benefiting you?** We use it to mainly protect our company's data from web application attacks ### 16. IBM Security AppScan Standard REVIEW **Rating:** 5.0/5.0 stars **Reviewed by:** Mehdi T. | Senior ETL Developer, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** January 12, 2018 **What do you like best about HCL AppScan?** Real time agent status monitorning, agent logging and It is very cost effective compared to its performance and the features it offers. I like the way it assesses the applications. **What do you dislike about HCL AppScan?** The tool IBM Security AppScan Standard is oblivious of the inner workings of the application being tested. It is unaware of the programming languate, OS, database, etc. **Recommendations to others considering HCL AppScan:** Great software. IBM is a leader in providing software solutions and yet another example of their pioneer work. **What problems is HCL AppScan solving and how is that benefiting you?** Our business was looking for a solution that reduces/stops web application attacks and protect our data at the same time. IBM Security AppScan Standard offers both the things and at the same time it is very well adopted for the cost savings that it offers most certainly, as well as time savings among many other benefits. ### 17. Great Security Tool **Rating:** 4.0/5.0 stars **Reviewed by:** Swati S. | Senior Programmer Specialist, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** February 10, 2018 **What do you like best about HCL AppScan?** Generate accurate results based on the inputs. Uses the solid base of IAST and DAST technologies that are most reliable for detecting the security and other issue of application. Advance configuration options for testing broad range of case. **What do you dislike about HCL AppScan?** Deviation from the real output when number of test cases increase. No option to test the complexity of the code while issue being identified in on the real environment. **Recommendations to others considering HCL AppScan:** Great tool when used with proper test and use cases. Gives you the the results on all kind of possible issues before production. **What problems is HCL AppScan solving and how is that benefiting you?** It has detected many issues in the application that could lead to the hacking the site. It provides possible threat for any issues in application. ### 18. The best in Application Security Testing Tool **Rating:** 4.0/5.0 stars **Reviewed by:** Aung Thu Rha H. | Senior Security Engineer, Computer & Network Security, Enterprise (> 1000 emp.) **Reviewed Date:** December 21, 2017 **What do you like best about HCL AppScan?** IBM is one of a few vendors that offer all DAST, SAST & IAST scanning technology. IDM AppScan Standard contains both DAST and IAST via glassbox. IBM can generate the accurate result with high computational time. The reporting format is centralized on risks that is easier for developers to understand. **What do you dislike about HCL AppScan?** IBM AppScan standard doesn't offer SCA which is limited only for AppScan Enterprise. **Recommendations to others considering HCL AppScan:** It's a bit expensive compared with the competitors and the close vendors to consider are Fortify, Checkmarx, Veracode and Synopsys. **What problems is HCL AppScan solving and how is that benefiting you?** As for the security engineers that offers AppSec services to the clients, IBM AppScan shows reliable results with less false positives and easy to claim customers trust. Moreover, the support for IBM engineers is globally and it's not a problem to get local support no matter where you are. ### 19. Great App Security Tool **Rating:** 4.0/5.0 stars **Reviewed by:** Mahesh S. | Professional Programer Analyst, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** January 30, 2018 **What do you like best about HCL AppScan?** Advance configurations for running the authenticity test of an application. Scope of verification is wide, you can not think all security issues it offers to identify. Integration process is easy. **What do you dislike about HCL AppScan?** Sometime gives few results when number of test performed is increased. **Recommendations to others considering HCL AppScan:** Great product. **What problems is HCL AppScan solving and how is that benefiting you?** Security and vulnerability of applications. ### 20. Nice App Security Tool **Rating:** 3.5/5.0 stars **Reviewed by:** Sanjeev T. | Software Specialist, Hospital & Health Care, Enterprise (> 1000 emp.) **Reviewed Date:** January 21, 2018 **What do you like best about HCL AppScan?** Alert of possible threat/vulnerability, Range of testing is quiet impressive, Quick remediation results and authentication test with advanced configuration. **What do you dislike about HCL AppScan?** Retesting fails when number of issues increased. It also reports non-threats sometime. **Recommendations to others considering HCL AppScan:** Recommended **What problems is HCL AppScan solving and how is that benefiting you?** Application security and vulnerability ### 21. protection against web applications **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Automotive | Enterprise (> 1000 emp.) **Reviewed Date:** December 24, 2017 **What do you like best about HCL AppScan?** it classify and prioritize assets based on impact of business and identify the high risk areas and also test the the applications before real deployment.It is easy to configure **What do you dislike about HCL AppScan?** its is not granular as standard.they have sometime confusing licensees. **What problems is HCL AppScan solving and how is that benefiting you?** Simplify remediation by identifying vulnerabilities and generating detailed results through comprehensive scanning coverageApplication Data view that is now the default view during the Explore stage. It is updated live as IBM Security AppScan explores the site, and data in all three panes can be clicked on and viewed. ### 22. Easy to implement but needs a workflow improvement **Rating:** 3.5/5.0 stars **Reviewed by:** Jallal E. | Software Developer, Automotive, Mid-Market (51-1000 emp.) **Reviewed Date:** January 22, 2018 **What do you like best about HCL AppScan?** The AppScan tool provides an excellent results and a very responsive customer support . **What do you dislike about HCL AppScan?** Although the result quality is good the overall workflow need major improvement. **What problems is HCL AppScan solving and how is that benefiting you?** Scan and test applications for security vulnerabilities. ### 23. You somehow feel more secure **Rating:** 4.0/5.0 stars **Reviewed by:** Vikhyat G. | Associate Systems Programmer, Defense & Space, Enterprise (> 1000 emp.) **Reviewed Date:** October 31, 2017 **What do you like best about HCL AppScan?** It automatically identifies possible breaches, provides solutions too. **What do you dislike about HCL AppScan?** Web apps today can be developed in many languages, and every framework has a different set of parameters. It should be tailored for specific frameworks. **Recommendations to others considering HCL AppScan:** Secures sensitive data, automatically identifies and fixes issues. So, definitely, something to look into. **What problems is HCL AppScan solving and how is that benefiting you?** Securing our web app for the airports. It did realize a possible bug once which could have proved costly to us. ### 24. IBM Security for vulnerabilities **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** December 29, 2017 **What do you like best about HCL AppScan?** We use IBM Security AppScan to scan web sites for vulnerabilities. **What do you dislike about HCL AppScan?** It does not support/suggest security issues while writing the code. It provides only Static run support. **Recommendations to others considering HCL AppScan:** I recommend this product to identify security issues. It help to identify security vulnerabilities within the application and after run provides the report of all issues. **What problems is HCL AppScan solving and how is that benefiting you?** It help us to identify and fix Security vulnerabilities. It help us to improve code quality before moving to production. ### 25. IBM Security AppScan Standard **Rating:** 4.0/5.0 stars **Reviewed by:** Notiemwonmwan A. | Student Nurse Extern, Hospital & Health Care, Enterprise (> 1000 emp.) **Reviewed Date:** December 14, 2017 **What do you like best about HCL AppScan?** What we liked best was that it prevents identify theft **What do you dislike about HCL AppScan?** what we did not really like is that it does not identify all vulnerabilities **What problems is HCL AppScan solving and how is that benefiting you?** Testing apps before taking them live ### 26. Engineer **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** November 28, 2017 **What do you like best about HCL AppScan?** Flexibility of featuresvare useful when attacking new use cases **What do you dislike about HCL AppScan?** Limited scope of new applications for usecases **What problems is HCL AppScan solving and how is that benefiting you?** Find new bugs ## HCL AppScan Discussions - [Who owns AppScan?](https://www.g2.com/discussions/who-owns-appscan) - 1 comment - [Is AppScan free?](https://www.g2.com/discussions/is-appscan-free) - 1 comment - [View HCL AppScan pricing details and edition comparison](https://www.g2.com/products/hcl-appscan/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-01+05%3A37%3A49+-0500&secure%5Bsession_id%5D=b52a7fa0-adbc-446c-8a45-f6c0dfdf59d4&secure%5Btoken%5D=f6d48f0f2bd648e3521d6da7f04a6da518a8daf63b62b846ba8c765efa09a251&format=llm_user) ## HCL AppScan Features **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Code Analysis **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution ## Top HCL AppScan Alternatives - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) - 4.5/5.0 (69 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) - 4.2/5.0 (44 reviews)