HCL AppScan Reviews & Product Details

I like that HCL AppScan identifies application security vulnerabilities early in the development lifecycle and gives developers actionable guidance to remediate them. It helps integrate security into the SDLC instead of treating it as a final checkpoint before production. I also value automated security testing in the CI/CD pipeline, so testing happens as part of development rather than waiting for a separate security review before release. Review collected by and hosted on G2.com.

I would say HCL AppScan should be faster and false positive rate should be improved Review collected by and hosted on G2.com.

It gives me multiple benefits in ease of using the platform. The result output is also well-deserving. It provides more accuracy and well-implemented features. Review collected by and hosted on G2.com.

HCL AppScan is useful for identifying application security vulnerabilities, but some common drawbacks are false-positive results, longer scan times for large applications, complex initial configuration, and high resource usage. It can also have a learning curve for new users, and understanding the scan reports and fixing the identified vulnerabilities may require considerable technical effort. Review collected by and hosted on G2.com.

Its key strengths are deep web/API testing, vulnerability correlation, and reduced false positives. I also appreciate the available integrations in CI/CD pipelines. Review collected by and hosted on G2.com.

One thing I dislike about HCL AppScan is that it can feel a bit complicated, especially the first time you use it. The interface includes a lot of options, and it can take a while to understand how the different scan configurations work and which settings to choose. I also find that the scan results sometimes require a fair amount of manual review, since not every finding is equally useful or accurate. Review collected by and hosted on G2.com.

The single best feature of HCL AppScan is its Intelligent Finding Analytics (IFA) and Fix Grouping capabilities. Instead of forcing me to read through an endless list of individual vulnerabilities, the built-in machine learning engine automatically filters out false positives. Review collected by and hosted on G2.com.

The interface (UI) feels dated and clunky. It also consumes a lot of system resources, and scan times can be very long on massive architectures. The initial setup and configuration are overwhelming, and onboarding new teams takes more effort than it should. Review collected by and hosted on G2.com.

HCL App Scan has a really good user interface. It clearly shows the number of vulnerabilities and provides detailed, accurate information about each one. This helps me, as a tester, analyze the results much better and understand the issues more easily. Review collected by and hosted on G2.com.

HCL App Scan is good at finding vulnerabilities. However, compared to other enterprise tools, it tends to report more false positives. At times, the number of false-positive issues can be a problem. Review collected by and hosted on G2.com.

I like that it has a combo of static and dynamic application security testing. It performs well, onboards and integrates quickly, and surfaces vulns early. A clean user interface, and it comes in a reasonable price point. I love that I can use the advanced AI functions. Review collected by and hosted on G2.com.

Its not the cheapest solution. I would consider it to be middle of the road in pricing. Some of the UI is missing features that I would want. I felt like onboarding was fine and the customer support has been great. Review collected by and hosted on G2.com.

I love how it catches security flaws early right inside my usual coding workspace so I don't have to disrupt my workflow. The AI-powered code fixes are a lifesaver because they actually show me exactly how to patch the vulnerability on the spot. Plus, it rarely wastes my time with false alarms, meaning I can just focus on writing clean code. Review collected by and hosted on G2.com.

The scanning process can feel slow, especially during deep static analysis on large codebases, which really bogs down development. It is also difficult to set up and configure initially, requiring a lot of manual tuning to get it running smoothly. Review collected by and hosted on G2.com.

It’s very good at recognizing all kinds of issues and problems. It feels very complete and helps a lot with compliance, especially in contexts where that becomes crucial. Review collected by and hosted on G2.com.

It’s consistently pretty slow, especially when there are a lot of PRs in the queue. That can be particularly annoying during peak hours at the company. Review collected by and hosted on G2.com.

I use HCL AppScan for application security testing to identify vulnerabilities in web apps and APIs. I like that it quickly identifies security vulnerabilities and helps us prioritize what needs to be fixed. I also like its reporting and integration with our security workflow, as it makes it easier to track findings and communicate issues to the development team. Review collected by and hosted on G2.com.

I find the setup a bit complex, and I think the interface could be more intuitive. Some scans also take longer than I expect. Review collected by and hosted on G2.com.

What I like best about HCL AppScan is its comprehensive application security testing capabilities, including static (SAST), dynamic (DAST), and interactive security testing. Review collected by and hosted on G2.com.

One aspect I dislike about HCL AppScan is that the initial setup and configuration can be complex, especially for large or highly customized environments. Additionally, scans can take a considerable amount of time for large applications, and some advanced features require a learning curve to fully utilize. Review collected by and hosted on G2.com.