HCL AppScan Reviews & Product Details

In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. The HCL AppScan turnaround time for Burp Suite or any new feature request is pretty good. Review collected by and hosted on G2.com.

The dashboard, for AppScan or the Fortified fast tool, which we use needs to be improved. Appscan scanning duration is very much time consuming process and needs improvement in this part. Review collected by and hosted on G2.com.

AppScan is tunable allowing us to test the essentials of our deployed software. We can configure it to accommodate our MFA infrastructure while continuing automated testing. This frees time for our analysts and allows us to focus our manual testing efforts on areas of concern flagged by AppScan. Review collected by and hosted on G2.com.

Some minor false positives frequently crop up. While we can turn these off, it seems that some of the default tests are following overly strict criteria. It also is sometimes confused when identifying TLS configuration on a target web server. Review collected by and hosted on G2.com.

The best part of Appscan is the record login features for the critical SSO authentication-based application to get full authenticated scans. Review collected by and hosted on G2.com.

The interface need to modified for the standard version Review collected by and hosted on G2.com.

Great Language coverage, SAST scan allows us at the code level, and DAST Scan at the app level does a great job of finding the issues with minimal false positives. Review collected by and hosted on G2.com.

Long DAST Scans (Which can be controlled though) and error outs and need to restart the test Review collected by and hosted on G2.com.

It can scan web applications automatically, which also allows for the customization of scan. Additionally, it is great for its ability to prioritize vulnerabilities based on their severity. Review collected by and hosted on G2.com.

AppScan, like any other automated tool, can produce false positives or alarms, which can be time-consuming to investigate and lead to unnecessary anxiety. Review collected by and hosted on G2.com.

Various features it provides, starting from recorded login, manual explore and JIRA integration Review collected by and hosted on G2.com.

JIRA integration should be more customisable Review collected by and hosted on G2.com.

Application interface and Solution Stability Review collected by and hosted on G2.com.

The reportis not containing detailed explanation Review collected by and hosted on G2.com.

The thing I like the most about AppScan is that it's easy to connect to our CI/CD pipeline and has a lot of built in connectors Review collected by and hosted on G2.com.

I don't particularly like the high rate of false positives that emerges from the scans Review collected by and hosted on G2.com.

How easy it is to use, being able to make granular reports as needed Review collected by and hosted on G2.com.

The software update almost always gives a problem, I would like it to be more transparent Review collected by and hosted on G2.com.

One of the best tools for app security. Easy to use and good documentation. Review collected by and hosted on G2.com.

Cost can be a factor, considering there is a freeware option available. Review collected by and hosted on G2.com.