--- title: HCL AppScan Reviews meta_title: 'HCL AppScan Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 86 reviews by the users' company size, role or industry to find out how HCL AppScan works for a business like yours. aggregate_rating: rating_value: 4.1 review_count: 86 scale: '5' date_modified: '2026-09-07' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # HCL AppScan Reviews **Vendor:** HCL Technologies **Category:** [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Average Rating:** 4.1/5.0 **Total Reviews:** 86 **AI Enabled:** This product embeds AI to enhance or extend its core functionality. ## About HCL AppScan HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools pinpoint application vulnerabilities, allowing for quick remediation in every phase of the software development lifecycle. Fast and Accurate Scanning for Secure DevOps Developers and DevOps teams can quickly and accurately scan code, applications, and APIs for security vulnerabilities while applications are being developed. This allows companies to fix issues at the earliest stages of the software development lifecycle, when it is least costly to the business. Focus on the Fix Continuous monitoring with IAST, along with auto issue correlation with DAST and SAST scan results allows DevOps teams to group and prioritize findings for faster, more streamlined remediation. Enterprise Management for Security Teams Centralized, easy-to-use dashboards provide visibility and oversight of all security scanning and remediation, and allow users to set scan parameters and compliance policies. ## HCL AppScan Reviews ### 1. Deep DAST/SAST Scanning with Actionable Fix Guidance and Smooth CI/CD Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Hussain N. | Senior Information Security Engineer, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 27, 2026 **What do you like best about HCL AppScan?** What I like most about HCL AppScan is its deep scanning capabilities across both DAST and SAST, making it easy to spot critical vulnerabilities like SQL injection, XSS, and misconfigurations early in the development lifecycle. The actionable remediation guidance saves our team a ton of research time by pointing directly to the affected code lines and suggesting exact fixes. On top of that, its seamless integration into CI/CD pipelines allows us to automate security checks without slowing down deployment speeds. **What do you dislike about HCL AppScan?** What I dislike most about HCL AppScan is that the user interface can feel dated and clunky, requiring a bit of a learning curve for team members who are new to the platform. Deep, comprehensive scans can also take a significant amount of time to complete and occasionally consume heavy system resources. Additionally, filtering out false positives still takes a noticeable amount of manual triage effort before passing actionable reports over to the engineering team. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan helps us solve the challenge of catching security vulnerabilities early in the software development lifecycle before code reaches production. Before using AppScan, manual security reviews were time-consuming and often bottlenecked our deployments right before launch. By automating automated SAST and DAST scans directly within our integration pipeline, we can catch and fix vulnerabilities like SQLi and XSS during development, significantly reducing security exposure and cutting down remediation time for developer teams. ### 2. Keeping half a million candidate resumes locked down during platform updates **Rating:** 4.5/5.0 stars **Reviewed by:** Adami C. | Operations Manager, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 04, 2026 **What do you like best about HCL AppScan?** Running our candidate portal through HCL AppScan on Cloud takes the headache out of testing our external job application forms. It runs dynamic scans directly against our staging servers to spot vulnerabilities in the CV upload widgets before we push any new site updates live. **What do you dislike about HCL AppScan?** The static testing engine generates way too many false flags on the custom CSS and basic layout scripts our web agency built. I end up wasting my Friday afternoons manually clearing alerts that are just harmless formatting tags rather than actual security risks. **What problems is HCL AppScan solving and how is that benefiting you?** Executive headhunting relies entirely on strict confidentiality, so making sure our database of salary expectations and private contact info is bulletproof is non-negotiable. Finding API flaws quietly in the background means we avoid explaining a massive resume leak to our top-tier corporate clients. ### 3. HCL App Scan **Rating:** 3.5/5.0 stars **Reviewed by:** sanjay s. | Security Analyst, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 13, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** HCL App Scan has a really good user interface. It clearly shows the number of vulnerabilities and provides detailed, accurate information about each one. This helps me, as a tester, analyze the results much better and understand the issues more easily. **What do you dislike about HCL AppScan?** HCL App Scan is good at finding vulnerabilities. However, compared to other enterprise tools, it tends to report more false positives. At times, the number of false-positive issues can be a problem. **What problems is HCL AppScan solving and how is that benefiting you?** The best feature is how easily it shows the flow of the code. It captures the vulnerability and then lets me trace it back to the source code, which is very important, especially in the context of code review. It’s also easy to integrate. ### 4. Fast Onboarding, Clean UI, and Strong AI-Powered App Security Testing **Rating:** 4.0/5.0 stars **Reviewed by:** Jan M. | Director of Global Cybersecurity, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 27, 2026 **What do you like best about HCL AppScan?** I like that it has a combo of static and dynamic application security testing. It performs well, onboards and integrates quickly, and surfaces vulns early. A clean user interface, and it comes in a reasonable price point. I love that I can use the advanced AI functions. **What do you dislike about HCL AppScan?** Its not the cheapest solution. I would consider it to be middle of the road in pricing. Some of the UI is missing features that I would want. I felt like onboarding was fine and the customer support has been great. **What problems is HCL AppScan solving and how is that benefiting you?** I want to be able to automate the static and dynamic code testing. AppScan has been able to do that, perform well, drive home the results I want, with a great UI. ### 5. Comprehensive Issue Detection That Strengthens Compliance **Rating:** 4.0/5.0 stars **Reviewed by:** Enrico C. | Student, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 05, 2026 **What do you like best about HCL AppScan?** It’s very good at recognizing all kinds of issues and problems. It feels very complete and helps a lot with compliance, especially in contexts where that becomes crucial. **What do you dislike about HCL AppScan?** It’s consistently pretty slow, especially when there are a lot of PRs in the queue. That can be particularly annoying during peak hours at the company. **What problems is HCL AppScan solving and how is that benefiting you?** Before we brought in AppScan, our release cycles were constantly getting held up by last-minute vulnerability scrambles right when we were trying to ship, and manual code audits just weren’t keeping pace with our deployment cadence. AppScan has helped remove that bottleneck by catching critical security issues early, especially nasty injection flaws, broken authentication, and risky third-party packages. ### 6. Reliable Vulnerability Detection and Remediation with HCL AppScan **Rating:** 4.5/5.0 stars **Reviewed by:** Chaitanya S. | IT SECURITY ANALYST , Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 27, 2026 **What do you like best about HCL AppScan?** HCL AppScan is easy to use and provides comprehensive vulnerability detection for web applications. I particularly like its detailed findings, actionable remediation recommendations, and integration capabilities, which help streamline security assessments and reduce remediation effort. **What do you dislike about HCL AppScan?** While HCL AppScan is effective for vulnerability detection, the interface can feel complex for new users, and scan results sometimes require additional manual analysis to prioritize findings. Scan times can also be lengthy for larger applications. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan helps us identify security vulnerabilities in web applications early in the development and testing lifecycle. This improves our security posture, supports compliance requirements, reduces manual testing effort, and enables teams to remediate issues faster before they reach production. ### 7. PCI Compliance and Regulatory Checks Made Easy **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 07, 2026 **What do you like best about HCL AppScan?** PCI compliance has been the biggest benefit for us, especially when combined with the additional regulatory checks. Rapidfix has also been useful recently for scanning our code for vulnerabilities. **What do you dislike about HCL AppScan?** It isn’t lightweight; in fact, it can be quite resource-heavy. The SAST scans can generate a lot of false positives. It also requires training and upskilling our staff to make full use of the product. **What problems is HCL AppScan solving and how is that benefiting you?** AppScan has been a game-changer across our large enterprise software footprint. Having single- or few-pane-of-glass visibility into our diverse software portfolio has been extremely useful, especially for keeping everything easier to track and understand. ### 8. Comprehensive AST in One Tool, Though AI Scanning May Shift Its Relevance **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 27, 2026 **What do you like best about HCL AppScan?** It is comprehensive, having multiple application security testing capabilities so multiple tools (for SAST, DAST, etc) are not needed. It can be integrated into ci/cd pipeline and provide simplicity with one tool. We stopped using it, not because the tool was not good but rather because we thought we would get more value investing the money into internal AI scanning capabilities to do similar things. **What do you dislike about HCL AppScan?** I think it is becoming less relevant and helpful due to the prevalence of AI. Not because of the tool itself, but because I think AI scanning is going to replace the traditional AST scanning tools. **What problems is HCL AppScan solving and how is that benefiting you?** It integrated into developer environments and IDEs to catch code-level vulnerabilities early. This helps ensure secure by design and reduces things like bug bounty payouts for vulns found after the fact. ### 9. Powerful All-in-One Security Tool, But Costly, Clunky, and Slow on Large Codebases **Rating:** 2.5/5.0 stars **Reviewed by:** Rohit B. | Technical Consultant, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 18, 2026 **What do you like best about HCL AppScan?** Appscan is one of the tools that provides IAST, SAST, DAST, and SCA under one roof. It also offers a wide range of OBB integrations at no additional cost. **What do you dislike about HCL AppScan?** The thing I do not like is it's high cost, clunky user experience and it is usally slow for large codebases. Also , the intial setup is quite difficult to do. **What problems is HCL AppScan solving and how is that benefiting you?** The Appscan helps me to find OWASP vulnerabilities like SQLi and XSS. It exactly tells me which line of codebase to change, like "SQL injection on line 50". ### 10. Comprehensive AppSec Testing That Makes Finding and Fixing Vulnerabilities Easy **Rating:** 4.5/5.0 stars **Reviewed by:** Roushan J. | Application Security Consultant, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through a business email account added to their profile **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 27, 2026 **What do you like best about HCL AppScan?** It’s a comprehensive application security testing platform that helps identify, track, and remediate software vulnerabilities across code, web applications, and APIs. **What do you dislike about HCL AppScan?** I don't think of anything for now but I would definitely provide my observation if come across anything. So far I have had positive experience working on this tool. **What problems is HCL AppScan solving and how is that benefiting you?** I have used SAST (Static Application Security Testing). Using tools to scan source code and binaries early in development has been really great. It helps us identify vulnerabilities early in the lifecycle. ### 11. AI-Powered Code Triage Saves Time **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 01, 2026 **What do you like best about HCL AppScan?** I like HCL AppScan's ability to use AI to triage my code issues and find fixes. It saves me time by not having to figure out what the issue is myself. The initial setup was very easy. **What do you dislike about HCL AppScan?** I didn't have anything I disliked specifically **What problems is HCL AppScan solving and how is that benefiting you?** I use HCL AppScan to analyze code for issues. It finds problems in my code and uses AI to triage and suggest fixes, saving me time from figuring out issues myself. ### 12. I've been using the product for almost 20 years **Rating:** 3.0/5.0 stars **Reviewed by:** Andrew P. | Sr. Security Specialist, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** January 23, 2024 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** Ease of use. I can quickly scan a site and have the response to the developers in a timely manner. **What do you dislike about HCL AppScan?** I can't scan applications behind Azure that use MFA. The recording login feature only allows me to use their built-in browser. When I choose a third-party browser to run a scan, it will only start that browser in private mode, so I can't use cached credentials. The reporting does not allow me to export to an Excel file to create a checklist of what the issues are, so I can easily track resolutions with projects and developers. I've only had to use customer support once, and it was not a good experience. I had to work directly with the technical sales department to have my issue resolved. I'd recommend using the same approach. The license manager is a nightmare to work with. I have to rebuild my machine every time I switch networks to perform a scan. 802.1x completely breaks the license manager, so I have to get a bypass from our networking group. Not sure why licensing is so difficult to use. I've had co-workers who quit using the product because of it. **What problems is HCL AppScan solving and how is that benefiting you?** I'm able to provide the developers a report of issues that may be present in their solution. Usually, the report consists of variables that I do not understand, but the report seems to make sense to the developers, which is good. ### 13. Easy to setup and powerful application security **Rating:** 4.0/5.0 stars **Reviewed by:** chandramohan K. | Junior System Administrator, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** March 10, 2024 **What do you like best about HCL AppScan?** It is easy to use and have Comprehensive Security Testing, Vulnerability Detection, including web, mobile, and cloud-based applications, needs of modern businesses with the less number of false positives and the ease of UI makes it the best of its kind. It is easy to install and setup with Automatic scan also, if stuck at some point then support from the team is quick and excellent **What do you dislike about HCL AppScan?** While scanning, if any error occurs then It can recommend the fix for the error that occurred during the scan which can be fixed in future. Like its storing multiple manuals explore, It should have the capability of storing multiple logins. HCL AppScan's document should mention step by step for beginners which can be helpful **What problems is HCL AppScan solving and how is that benefiting you?** It scans the application and fixes the loophole in application security before any disaster happens ### 14. A Testing Suite that packs quite a punch! **Rating:** 5.0/5.0 stars **Reviewed by:** Pranav U. | Flutter Developer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 09, 2024 **What do you like best about HCL AppScan?** The best thing I like about HCL AppScan is the clean and simple UI amalgamated with pretty accurate scan results. Unlike other applications or software, this app is very beginner friendly and the support it offers is outstanding. **What do you dislike about HCL AppScan?** Even though the app is accurate, some false positives always creeps in. Comparatively it gives less false positives than others in the market but I believe the false positives can be avoided in future to make testing less menial. **What problems is HCL AppScan solving and how is that benefiting you?** It helps in identifying security threats way earlier, during production itself and hence enables us to take mitigation steps or even raise the issue with higher authorities. HCL AppScan has been a life saver in the security domain for code analysis and vulnerability testing. ### 15. All in one solution **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Pharmaceuticals | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** February 12, 2024 **What do you like best about HCL AppScan?** One of the most important aspects especially about HCL AppScan is super easy to integrate directly into the SDLC. Managing it is very user-friendly and very easy for DevOps to also use. It is hosted in a cloud-native environment so it provides high availability, scalability and high restorable capacities for disaster recovery. Apart from that there are almost all the features available that are needed for proper in-depth Application Security Scanning, along with providing visibility into the current security posture and safeguarding the applications from threats, and vulnerabilities. It also keeps track of any compliance violations. Their crawler I must say is one of the top-notch in the market. Since it provides a comprehensive solution for security testing and management, it is used as a daily tool. It helped significantly to reduce errors and track metrics on a daily cadence. Another, interesting point to note is their prompt customer service, if any assistance is required. Overall it is a great tool! I highly recommend it! **What do you dislike about HCL AppScan?** The only downside I can think of is the cost is a bit on the higher end for lower-budget projects. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan has significantly reduced the flaw counts, which has made a positive impact on our overall security metrics and security posture. Due to its ease of implantation, I am now able to implement a Shift-left mentality in a more hostile approach. That was one of the major milestones that I have been able to achieve using the tool. ### 16. Empowering Application Security with HCL AppScan **Rating:** 4.5/5.0 stars **Reviewed by:** Athar S. | Lead SecOps Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 21, 2023 **What do you like best about HCL AppScan?** HCL AppScan stands out in delivering comprehensive security solutions. Its extensive suite of features guarantees a meticulous evaluation of applications, assisting in the identification and remediation of potential vulnerabilities with exceptional efficacy.

The most advantageous aspect of HCL AppScan lies in its sophisticated security testing capabilities. The tool's prowess in performing exhaustive scans and its adaptability to diverse security testing methodologies render it an invaluable asset in safeguarding applications against a myriad of potential threats.

HCL AppScan's intuitive interface simplifies navigation and its adaptability to diverse testing methodologies enhances its effectiveness. **What do you dislike about HCL AppScan?** While HCL AppScan is a powerful tool, the learning curve for new users can be steep. Beginners might find it challenging to grasp the full range of features and functionalities initially.

AppScan's documentation could be more detailed and beginner-friendly.
AppScan's implementation process can be challenging for some users. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan tackles the intricacies of Dynamic Application Security Testing (DAST) with finesse. It adeptly uncovers vulnerabilities in operational applications, erecting a critical barrier against potential threats. This unwavering dedication to DAST guarantees that your applications endure rigorous and dynamic security evaluations, fostering a more resilient security stance. ### 17. The easy choice **Rating:** 4.5/5.0 stars **Reviewed by:** K U K. | Cyber Security Analyst, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 25, 2023 **What do you like best about HCL AppScan?** HCL AppScan is a robust platform which has a great customer support which was the first choice to consider. Leverging the full potential in our DevSecOps team from the very beginning of our SDLC, the app setup was a breeze. Some of the noteworthy features that is unique to AppScan is SAST scan, cloud native, vast integration library and cross application monitoring. A noteworthy thing to point out is, the implementation took a very short amount of time which made AppScan as the easy choice. **What do you dislike about HCL AppScan?** There are no shortcomings in the AppScan according to my usage and workflow. **What problems is HCL AppScan solving and how is that benefiting you?** It is helping to scan the vulnerabilities on the cloud as we as on premise systems. Also, we use it in every phase of our SDLC to point out the code level vulnerabilities. ### 18. HCL Appscan **Rating:** 4.5/5.0 stars **Reviewed by:** Shreyansh Kumar G. | Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 23, 2024 **What do you like best about HCL AppScan?** HCL Appscan is known for its comprehensive approach to application security testing. One of the best features is its ability to detect a wide range of vulnerabilities across various types of applications. It has advanced scanning capabilities. **What do you dislike about HCL AppScan?** Interface can be more good. As Appscan is a commercial product it may not fit every budget **What problems is HCL AppScan solving and how is that benefiting you?** HCL Appscan is solving problems such as security vulnerabilities in web applications and APIs. It is benefiting me in various ways such as risk reduction, vulnerability identification, etc. ### 19. Technical Lead **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 21, 2023 **What do you like best about HCL AppScan?** HCL AppScan has been a game-changer for our security initiatives. Its robust features, including dynamic and static application security testing, have provided a thorough analysis of our applications. The comprehensive reports help us pinpoint vulnerabilities early in the development process, allowing for timely remediation. The interactive application security testing adds an extra layer of depth, ensuring a more resilient software environment. The user-friendly interface and detailed documentation further contribute to the overall positive experience. HCL AppScan undoubtedly stands out as a valuable asset in our quest for secure and reliable applications. **What do you dislike about HCL AppScan?** While HCL AppScan offers a robust set of features for application security, there are some areas that could be improved. The learning curve for new users is steeper than desired, and the initial setup process can be a bit cumbersome. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan has been instrumental in solving critical security challenges in our software development lifecycle. The Static Application Security Testing (SAST) functionality provides a deep dive into our source code, uncovering vulnerabilities early in the development process. This has significantly reduced the likelihood of releasing code with potential security risks. On the Dynamic Application Security Testing (DAST) front, AppScan's ability to simulate real-world attacks on running applications has been a game-changer. It detects vulnerabilities that might not be apparent in the source code alone, offering a comprehensive view of our application's security posture in different environments. The seamless integration of SAST and DAST in a single platform streamlines our security testing efforts. The consolidated reports provide actionable insights, enabling our team to prioritize and address vulnerabilities efficiently. HCL AppScan's contribution to enhancing the overall security of our applications is undeniable, and its role in fortifying our software against potential threats is invaluable. ### 20. Advanced scan results with less false positives **Rating:** 5.0/5.0 stars **Reviewed by:** Shashank B. | Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 15, 2024 **What do you like best about HCL AppScan?** Appscan tool is amongst top rated automated scan tools that covers advanced attack surfaces and discovers vulnerabilities with minimal false positives. Best feature is it scans to a wider extent and advanced attacks which helps secure applications **What do you dislike about HCL AppScan?** Tools may adopt better cvss and cwe profiling of identified vulnerabilities **What problems is HCL AppScan solving and how is that benefiting you?** It quickly scans the application binaries and results are accurate with elaborative attack description ### 21. I have used HCL AppScan for vulnerability assessments it is really amazing tool to work with **Rating:** 5.0/5.0 stars **Reviewed by:** Madhusudhanraju T. | Associate - Cyber Security, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 20, 2024 **What do you like best about HCL AppScan?** Its really effictive and provides results with minimum number of false positives. **What do you dislike about HCL AppScan?** User interface could be a little better than the existing one **What problems is HCL AppScan solving and how is that benefiting you?** HCL application is performing both DAST and SAST, It is effectively providing the vulnerbilities with proper remediation. It is also providing less number of false positives when compared to different tools. ### 22. HCL scan review for application **Rating:** 5.0/5.0 stars **Reviewed by:** Divyakanth V. | IAM Engineer, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 21, 2024 **What do you like best about HCL AppScan?** with the less number of false positives and the ease of UI makes it the best of its kind. Not to forget the continuous customer support provided round the clock. **What do you dislike about HCL AppScan?** Making the "quick scan" response bit quicker with effective vulnerabilities would be a greater addition **What problems is HCL AppScan solving and how is that benefiting you?** Cost effective with effective vulnerabilities found out. ### 23. Comprehensive Analysis and User Experience: HCL AppScan Review **Rating:** 4.5/5.0 stars **Reviewed by:** Momin N. | Information Technology Executive, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 23, 2023 **What do you like best about HCL AppScan?** Comprehensive Security Testing, Vulnerability Detection, including web, mobile, and cloud-based applications, adapting to the diverse needs of modern businesses. Integration Capabilities,With its scalable architecture and flexible deployment options, HCL AppScan caters to businesses of varying sizes and complexities, adapting to their security testing needs effectively. **What do you dislike about HCL AppScan?** significant system resources during scanning,mastering the full capabilities of the software can have a steep learning curve,The cost of HCL AppScan could be a concern for smaller businesses or startups. **What problems is HCL AppScan solving and how is that benefiting you?** Vulnerability Identification and Mitigation,Early Detection of Security Gaps ### 24. HCL App Scan Features **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 27, 2024 **What do you like best about HCL AppScan?** It has deployment options for every type, whether it is on-premises, cloud-based, or cloud-native. Software Composition Analysis is one of the best available solutions according to me, easy to implement and use. **What do you dislike about HCL AppScan?** Nothing much to describe here because haven't seen anything yet, but surely let you know if I find. **What problems is HCL AppScan solving and how is that benefiting you?** It addresses various problems such as security testing and identifying vulnerabilities for quick remediation throughout the software development life cycle. ### 25. HCL AppScan **Rating:** 4.5/5.0 stars **Reviewed by:** AKASH V. | Cyber Security Analyst, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a review partner **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 13, 2024 **What do you like best about HCL AppScan?** HCL AppScan - reduced the risk level, enhanced application security management, and increased regulatory compliance. **What do you dislike about HCL AppScan?** Nothing now from my side, it's doing their work good **What problems is HCL AppScan solving and how is that benefiting you?** Find vulnerabilities and fix the issue before our software is released ### 26. HCL Apps can Review **Rating:** 3.5/5.0 stars **Reviewed by:** Aninkan G. | System Engineer(L2 Production Application Support Executive), Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 05, 2024 **What do you like best about HCL AppScan?** HCL AppScan provides the best features in app scanning, time saving and provides a more professional approach in guiding users **What do you dislike about HCL AppScan?** HCL AppScan can sometimes be expensive and likeable to not used on bulk **What problems is HCL AppScan solving and how is that benefiting you?** It is benefiting me in Static Application Server Testing ### 27. Efficient Security Scanning: HCL AppScan Review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through Google using a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 11, 2024 **What do you like best about HCL AppScan?** AppScan's thorough scanning capabilities and CI/CD integration streamline security testing. Detailed reporting aids in prioritizing vulnerabilities effectively. **What do you dislike about HCL AppScan?** Complexity and potentially prohibitive licensing may pose challenges for new users and smaller organizations. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan solves security vulnerabilities in web applications and APIs, preventing breaches and data compromises. This benefits me by enabling efficient security assessments, prioritizing remediation, and ensuring the integrity of our digital assets, instilling confidence in stakeholders and customers. ### 28. application security testing suite, used to test web applications and services **Rating:** 5.0/5.0 stars **Reviewed by:** Dhas V. | Technology Operation Specialist , Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 19, 2023 **What do you like best about HCL AppScan?** It features cutting edge methods and techniques to identify security vulnerabilities to help protect applications from the threat of cyber-attacks. Incremental scanning, test optimization, third-party component detection, web API scanning, and more **What do you dislike about HCL AppScan?** No dislike I can realise as of now. Thanks **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan is one of the best tools for application security. It is easy to use, gets the job done, and provides good documentation. ### 29. It works very smoothly and just add things are going crazy. **Rating:** 4.0/5.0 stars **Reviewed by:** Alim P. | Senior Software Test Engineer, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 12, 2024 **What do you like best about HCL AppScan?** Simple, accurate, and awesome one. Looks stylish. **What do you dislike about HCL AppScan?** Speed advertising. Optimization things required. **What problems is HCL AppScan solving and how is that benefiting you?** It gave me many easy and difficult bugs over time. ### 30. User friendly security intelligence and very quick security scanning **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Security and Investigations | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 24, 2024 **What do you like best about HCL AppScan?** It gives best security features of security scanning and save from security loopholes on the devices have applications installed. Very quick and security rich scanning **What do you dislike about HCL AppScan?** So far, I couldn't find any issues so no complaints **What problems is HCL AppScan solving and how is that benefiting you?** It scans and and give quick results for security loopholes, and easy to use also works really quick ### 31. This app scan is very convenient and easy to use **Rating:** 5.0/5.0 stars **Reviewed by:** manjunath P. | Information Security Analyst, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 08, 2023 **What do you like best about HCL AppScan?** HCL app scan is useful for developers and security teams with a Pintpoint application vulnerability for quick scans and remediation in every. It is very convenient to use and balance between accuracy and speed of the results. Easy to install and easy to setup. **What do you dislike about HCL AppScan?** Sometimes it will takes long time to complete a scan. **What problems is HCL AppScan solving and how is that benefiting you?** Performing security tests on web application and API. ### 32. Appscan standard we use for application vulnerability scanning. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Utilities | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 16, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** HCL support is really fast and reliable. Appreciate **What do you dislike about HCL AppScan?** The demerits I seen in Appscan have been rectified in the latest versions. I could see the developers come with new features in new releases. Thanks **What problems is HCL AppScan solving and how is that benefiting you?** Appscan crash in the middle of the scan which has been rectified. Appscan took days to complete scans with large URLs which has been remediated in new releases ### 33. Good stand alone software which enhance the security of the network **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in E-Learning | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 22, 2023 **What do you like best about HCL AppScan?** It provides good features like jira integration which is very necessary to manage the product and team with having good enhancement of the security features enabled. It is very helpful in managing the user and security groups. Easy to handle and maintain. Good customer support. Implementation is very easy. Frequency of usage is good in all terms. **What do you dislike about HCL AppScan?** According to me nothing is there which I dislike in this product. **What problems is HCL AppScan solving and how is that benefiting you?** It is overall beneficial in enhancing the security of the system. ### 34. Ok App **Rating:** 3.0/5.0 stars **Reviewed by:** Gaurav B. | Cyber Security Engineer, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 12, 2023 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** It is from a well known and trusted brand. **What do you dislike about HCL AppScan?** Not till now.Gonna use more to know abt it. **What problems is HCL AppScan solving and how is that benefiting you?** Got to know about the vulnerabilities and remediation. ### 35. General Overview **Rating:** 4.0/5.0 stars **Reviewed by:** Nehal C. | Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 20, 2023 **What do you like best about HCL AppScan?** Easy to use and does the job well compared to alternates **What do you dislike about HCL AppScan?** Nothing as such. I found the tools decent. **What problems is HCL AppScan solving and how is that benefiting you?** We were trying to find different security complications and vulnerabilities and found the tool helpful in viewing those. ### 36. Fantastic experience after using the AppScan **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 19, 2024 **What do you like best about HCL AppScan?** Quick remediation in SDLC phase of the testing **What do you dislike about HCL AppScan?** Everything is perfect. UI can be a little better **What problems is HCL AppScan solving and how is that benefiting you?** In every phase it provides the bugs ### 37. HCL AppScan Review **Rating:** 3.5/5.0 stars **Reviewed by:** Adish J. | Information Security Manager, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 19, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** HCL AppScan's best feature is that it offers unlimited application scans, in a single license. Application setup is relatively easy and often gives accurate results. **What do you dislike about HCL AppScan?** Not a great tool for scenarios where authentication/authorization is not an inherent part of the application flow. The tool should also have an active mechanism for OTP verification. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan enabled us to automate DAST to a certain level. It reports relatively fewer false positives which helps to reduce any additional overhead on the team to validate reported issues. ### 38. Powerfull, easy to use **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 08, 2023 **What do you like best about HCL AppScan?** It is good tool for web app security scanning, support for technologies like soap, rest is something which is not offered by all tools, but appscan supports this. It is easy to install and integrate **What do you dislike about HCL AppScan?** It is not perfect, i am unable to find any authorization vuknerabilities or PE issues with appscan. It also seems little pricey ans resource hungry. **What problems is HCL AppScan solving and how is that benefiting you?** Automated and quick dast scans to find easy to spot secuirty issues. ### 39. Have been using HCL APPSCAN for 3 years and the product is doing what it claims. **Rating:** 4.5/5.0 stars **Reviewed by:** James Z. | Senior Network Security Analyst, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 15, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** Straightforward functions - easy to use and manage. **What do you dislike about HCL AppScan?** Troubleshooting is a bit of difficult. Session management is not easy to configure. **What problems is HCL AppScan solving and how is that benefiting you?** Detect web vulnerabilities and provide suggestions. Very good to providing advice to avoid common vulnerabilities. ### 40. Smooth application scan app for security purposes **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** January 08, 2024 **What do you like best about HCL AppScan?** Scanning results seems accurate and beneficial. **What do you dislike about HCL AppScan?** More features can be added like it would me more good if it scans for more vulnerabilities. **What problems is HCL AppScan solving and how is that benefiting you?** Vulnerability scanning of app ### 41. Appscan the best security software I have used **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 25, 2023 **What do you like best about HCL AppScan?** Offers best security features for the organization Easy to use East to configure and install Provides good customer support Easy to integrate and migrate. Frequency is also good **What do you dislike about HCL AppScan?** Provides good security infrastructure and easy to use **What problems is HCL AppScan solving and how is that benefiting you?** No problem is encountered to me ### 42. Very detailed scans and my go to application for checking vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 16, 2023 **What do you like best about HCL AppScan?** trustful assessment easy to use automatic scans **What do you dislike about HCL AppScan?** long scanning cost is on higher side troubleshooting is a bit difficult but if youre a pro then nothing to worry **What problems is HCL AppScan solving and how is that benefiting you?** It provides detailed and trustful scans which is most important ### 43. good **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 22, 2023 **What do you like best about HCL AppScan?** its nice app and its been good app. its also good app **What do you dislike about HCL AppScan?** updates are slow and it has been also slow updates on most of the time **What problems is HCL AppScan solving and how is that benefiting you?** security testing is quite beneficial ### 44. Review for HCL app scan **Rating:** 4.0/5.0 stars **Reviewed by:** Sushant D. | Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 08, 2023 **What do you like best about HCL AppScan?** It is a good standalone tool available. It provides a range of features for identifying and remedying security vulnerabilities. It's designed to be flexible and scalable, making it suitable for a wide range of web applications and organisations. **What do you dislike about HCL AppScan?** It was a bit expensive. Also, it is a complex tool that requires a certain amount of expertise to use. It has a lot of features and can be overwhelming to some people. **What problems is HCL AppScan solving and how is that benefiting you?** HCL AppScan helps organizations identify and remediate security vulnerabilities in their web applications, improving the overall security of the application and reducing the risk of security breaches. It provides features like automated scanning, manual testing and code analysis to help assess the security of web applications. ### 45. Product strong for almost 20 years **Rating:** 5.0/5.0 stars **Reviewed by:** Andrew P. | Specialist, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 21, 2022 **What do you like best about HCL AppScan?** The product has always been consistent and delivers excellent results. The automated login process is a key function missing in competitor systems. Started using the tool in the early 2000's. **What do you dislike about HCL AppScan?** The tool is great. I don't care that the sales and dev branches are pushing the cloud solution. I like to maintain control of what reaches into my network. **What problems is HCL AppScan solving and how is that benefiting you?** The product allows me to quickly address issues in external facing web services and some mobile applications. I'm also able to provide evidence from within the tool on the issues it identifies. ### 46. An Automated and Integrated Platform that provides a Holistic Visibility into the Security **Rating:** 5.0/5.0 stars **Reviewed by:** Sylesh H. | Senior Manager, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** January 04, 2023 **What do you like best about HCL AppScan?** In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. The HCL AppScan turnaround time for Burp Suite or any new feature request is pretty good. **What do you dislike about HCL AppScan?** The dashboard, for AppScan or the Fortified fast tool, which we use needs to be improved. Appscan scanning duration is very much time consuming process and needs improvement in this part. **What problems is HCL AppScan solving and how is that benefiting you?** It is beneficial in my opinion since there are answers and recommendations for the difficulties. The advantage of AppScan is that it can diagnose according to application specifications. Dynamic diagnostics is basically a test that guarantees quality by the number of test cases. ### 47. AppScan is the foundation of our internal penetration testing **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Higher Education | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 15, 2022 **What do you like best about HCL AppScan?** AppScan is tunable allowing us to test the essentials of our deployed software. We can configure it to accommodate our MFA infrastructure while continuing automated testing. This frees time for our analysts and allows us to focus our manual testing efforts on areas of concern flagged by AppScan. **What do you dislike about HCL AppScan?** Some minor false positives frequently crop up. While we can turn these off, it seems that some of the default tests are following overly strict criteria. It also is sometimes confused when identifying TLS configuration on a target web server. **What problems is HCL AppScan solving and how is that benefiting you?** Deployment of internally developed web applications occurs faster than our staff could possibly review it manually. Automation allows us to maintain a reasonable pace of review and remediation of flaws for our apps. ### 48. Appscan Standard really amazing tool with lots of features **Rating:** 5.0/5.0 stars **Reviewed by:** Souvik C. | Senior Security Engineer, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through Google using a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 16, 2022 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about HCL AppScan?** The best part of Appscan is the record login features for the critical SSO authentication-based application to get full authenticated scans. **What do you dislike about HCL AppScan?** The interface need to modified for the standard version **What problems is HCL AppScan solving and how is that benefiting you?** Tried many tools for our in-house applications scanning, which have in-house build SSO login, but all failed to do an authentication scan fails. Appscan manual features & settings help to get a full scan report successfully. Reporting is quite good with all details summary. ### 49. Powerful Security Product **Rating:** 5.0/5.0 stars **Reviewed by:** Vinod K. | QA Technical Lead, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** December 19, 2022 **What do you like best about HCL AppScan?** Great Language coverage, SAST scan allows us at the code level, and DAST Scan at the app level does a great job of finding the issues with minimal false positives. **What do you dislike about HCL AppScan?** Long DAST Scans (Which can be controlled though) and error outs and need to restart the test **What problems is HCL AppScan solving and how is that benefiting you?** Finding out vulnerability issues in early life cycle using SAST and comprehensive with DAST. ### 50. cybersecurity manager **Rating:** 4.5/5.0 stars **Reviewed by:** Yu N. | cybersecurity manager, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** January 18, 2023 **What do you like best about HCL AppScan?** It can scan web applications automatically, which also allows for the customization of scan. Additionally, it is great for its ability to prioritize vulnerabilities based on their severity. **What do you dislike about HCL AppScan?** AppScan, like any other automated tool, can produce false positives or alarms, which can be time-consuming to investigate and lead to unnecessary anxiety. **What problems is HCL AppScan solving and how is that benefiting you?** AppScan is the ability to automatically scan web applications for a wide range of security vulnerabilities, including SQL injection, cross-site scripting (XSS), and insecure file uploads. ## HCL AppScan Discussions - [Who owns AppScan?](https://www.g2.com/discussions/who-owns-appscan) - 1 comment - [Is AppScan free?](https://www.g2.com/discussions/is-appscan-free) - 1 comment - [View HCL AppScan pricing details and edition comparison](https://www.g2.com/products/hcl-appscan/reviews?source=search§ion=pricing&secure%5Bexpires_at%5D=2026-09-07+23%3A35%3A42+-0500&secure%5Bsession_id%5D=64cbe54a-a58c-4eaa-9590-5e7859a53027&secure%5Btoken%5D=1afd3043ae5cbdf947ab59f0924e757afd70a594921817eee0b49759348dcc37&format=llm_user) ## HCL AppScan Features **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard ## Top HCL AppScan Alternatives - [Invicti](https://www.g2.com/products/invicti/reviews) - 4.5/5.0 (69 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) - 4.2/5.0 (45 reviews)