I appreciate HCL AppScan for its ability to catch bugs directly in the source code before deployment, which saves me a lot of headaches. The "bring your own language" feature is fantastic, as it isn't limited to just one language, making it versatile for my needs. I love the customization options, including custom rules and knowledge, which allow me to tailor scans specifically to my codebase. This flexibility not only makes the tool very simple to use but also helps me avoid wasting time, letting me invest my time in other tasks. The ease of integration with Jenkins is another standout feature for me, making it one of the best things about what HCL offers. Plus, the initial setup was straightforward and didn't require much technical staffing, and that adds to the overall ease of use. Review collected by and hosted on G2.com.

I would like more automation because the manual work and effort is still a thing, especially in triaging results. Review collected by and hosted on G2.com.