HCL AppScan Reviews & Product Details

I like its comprehensive application security testing (AST) platform and its ability to secure code, web applications, APIs, and cloud infrastructure. Review collected by and hosted on G2.com.

The main thing is, it is not very easy to start using it from day one. The installation process is very painful. And the pricing is very high. It is significantly higher compared to several alternative security and open-source testing tools. Review collected by and hosted on G2.com.

I like using HCL AppScan to generate reports of risks and vulnerabilities, which helps us identify and prioritize risks automatically. Review collected by and hosted on G2.com.

Sometimes it's hard to login with credentials due to the caching system. Review collected by and hosted on G2.com.

The fix grouping and remediation guidance helps save so much time. It groups all alerts together so it can be fixed at once. It plugs into IDEs easily Review collected by and hosted on G2.com.

It is expensive and the UI interface is hard to navigate and old. It is hard to learn how to use it. The scan times take very long and slows down computer Review collected by and hosted on G2.com.

Early vulnerability detection, comprehensive coverage, actionable reporting and reduced false positives. Its ability to catch vulnerabilities early in the SDL by integrating scanning directly into CI/CD pipeline Review collected by and hosted on G2.com.

Steep learning curve, slow scans on large codebases, high licensing cost, and complex setup. All of this can be tought for smaller teams. Thats all for the dislikes Review collected by and hosted on G2.com.

It integrates cleanly directly into CI/CD pipelines (like Jenkins and Azure DevOps) and IDEs. It handles REST/SOAP APIs and microservice architectures seamlessly Review collected by and hosted on G2.com.

Enterprise licensing and per-scan/per-application pricing models appear to be expensive. Slowness observed for comprehensive static (SAST) or dynamic (DAST) scans on large / complex codebases Review collected by and hosted on G2.com.

I like HCL AppScan's ability to use AI to triage my code issues and find fixes. It saves me time by not having to figure out what the issue is myself. The initial setup was very easy. Review collected by and hosted on G2.com.

I didn't have anything I disliked specifically Review collected by and hosted on G2.com.

Ease of use. I can quickly scan a site and have the response to the developers in a timely manner. Review collected by and hosted on G2.com.

I can't scan applications behind Azure that use MFA. The recording login feature only allows me to use their built-in browser. When I choose a third-party browser to run a scan, it will only start that browser in private mode, so I can't use cached credentials. The reporting does not allow me to export to an Excel file to create a checklist of what the issues are, so I can easily track resolutions with projects and developers. I've only had to use customer support once, and it was not a good experience. I had to work directly with the technical sales department to have my issue resolved. I'd recommend using the same approach. The license manager is a nightmare to work with. I have to rebuild my machine every time I switch networks to perform a scan. 802.1x completely breaks the license manager, so I have to get a bypass from our networking group. Not sure why licensing is so difficult to use. I've had co-workers who quit using the product because of it. Review collected by and hosted on G2.com.

It is easy to use and have Comprehensive Security Testing, Vulnerability Detection, including web, mobile, and cloud-based applications, needs of modern businesses with the less number of false positives and the ease of UI makes it the best of its kind. It is easy to install and setup with Automatic scan also, if stuck at some point then support from the team is quick and excellent Review collected by and hosted on G2.com.

While scanning, if any error occurs then It can recommend the fix for the error that occurred during the scan which can be fixed in future. Like its storing multiple manuals explore, It should have the capability of storing multiple logins. HCL AppScan's document should mention step by step for beginners which can be helpful Review collected by and hosted on G2.com.

The best thing I like about HCL AppScan is the clean and simple UI amalgamated with pretty accurate scan results. Unlike other applications or software, this app is very beginner friendly and the support it offers is outstanding. Review collected by and hosted on G2.com.

Even though the app is accurate, some false positives always creeps in. Comparatively it gives less false positives than others in the market but I believe the false positives can be avoided in future to make testing less menial. Review collected by and hosted on G2.com.

One of the most important aspects especially about HCL AppScan is super easy to integrate directly into the SDLC. Managing it is very user-friendly and very easy for DevOps to also use. It is hosted in a cloud-native environment so it provides high availability, scalability and high restorable capacities for disaster recovery. Apart from that there are almost all the features available that are needed for proper in-depth Application Security Scanning, along with providing visibility into the current security posture and safeguarding the applications from threats, and vulnerabilities. It also keeps track of any compliance violations. Their crawler I must say is one of the top-notch in the market. Since it provides a comprehensive solution for security testing and management, it is used as a daily tool. It helped significantly to reduce errors and track metrics on a daily cadence. Another, interesting point to note is their prompt customer service, if any assistance is required. Overall it is a great tool! I highly recommend it! Review collected by and hosted on G2.com.

The only downside I can think of is the cost is a bit on the higher end for lower-budget projects. Review collected by and hosted on G2.com.