TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Git

    Score10 out of 10
    N/AN/AN/A

    HCL AppScan

    Score7.2 out of 10
    N/AAppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.N/A
    Pricing
    GitHCL AppScan
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    GitHCL AppScan
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    GitHCL AppScan
    Considered Both Products
    Open Source
    No answer on this topic
    HCLSoftware
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    12 Answers
    100%
    Would buy again
    5 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    11 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    12 Answers
    100%
    Happy with the feature set
    5 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    9 Answers
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    9 Answers
    No answers on this topic
    Best Alternatives
    GitHCL AppScan
    Small Businesses
    GitHub
    Score9.2 out of 10
    No answers on this topic
    Medium-sized Companies
    GitHub
    Score9.2 out of 10
    No answers on this topic
    Enterprises
    Perforce P4
    Score7.5 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    GitHCL AppScan
    Likelihood to Recommend
    10.0
    (36 ratings)
    8.3
    (6 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Usability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.5
    (11 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    GitHCL AppScan
    Likelihood to Recommend
    Open Source
    GIT is good to be used for faster and high availability operations during code release cycle. Git provides a complete replica of the repository on the developer's local system which is why every developer will have complete repository available for quick access on his system and they can merge the specific branches that they have worked on back to the centralized repository. The limitations with GIT are seen when checking in large files.
    Incentivized
    Read full review
    HCLSoftware
    In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
    Incentivized
    Read full review
    Pros
    Open Source
    • Ability to create branches off current releases to modify code that can be tested in a separate environment.
    • Each developer had their own local copy of branches so it minimizes mistakes being made.
    • Has a user-friendly UI called Git Gui that users can use if they do not like using the command line.
    • Conflicts are displayed nicely so that developers can resolve with ease.
    Incentivized
    Read full review
    HCLSoftware
    • AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10.
    • Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers.
    • Technical reports include remediation information and cross reference CVSS scores
    • Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance
    Incentivized
    Read full review
    Cons
    Open Source
    • There can be quite a number of commands once you get to the advanced features and functionality of Git. Takes time to master.
    • Doesn't handle static assets (ie: videos, images, etc.) well. Although in the recent years, new functionality has been introduced to address this.
    • Many different GUIs, many people (including myself) opt to just use the command-line.
    Incentivized
    Read full review
    HCLSoftware
    • It can have a FAQ session in the Application itself.
    • It can recommend the fix for the error that occurred during the scan.
    • Like its storing multiple manuals explore, It should have the capability of storing multiple logins.
    Incentivized
    Read full review
    Likelihood to Renew
    Open Source
    Git has met all standards for a source control tool and even exceeded those standards. Git is so integrated with our work that I can't imagine a day without it.
    Incentivized
    Read full review
    HCLSoftware
    No answers on this topic
    Usability
    Open Source
    Git is easy to use most of the time. You mostly use a few commands like commiting, fetch/pull, and push which will get you by for most of time.
    Incentivized
    Read full review
    HCLSoftware
    No answers on this topic
    Support Rating
    Open Source
    I am not sure what the official Git support channels are like as I have never needed to use any official support. Because Git is so popular among all developers now, it is pretty easy to find the answer to almost any Git question with a quick Google search. I've never had trouble finding what I'm looking for.
    Incentivized
    Read full review
    HCLSoftware
    No answers on this topic
    Implementation Rating
    Open Source
    It's easy to set up and get going.
    Incentivized
    Read full review
    HCLSoftware
    No answers on this topic
    Alternatives Considered
    Open Source
    I've used both Apache Subversion & Git over the years and have maintained my allegiance to Git. Git is not objectively better than Subversion. It's different.
    The key difference is that it is decentralized. With Subversion, you have a problem here: The SVN Repository may be in a location you can't reach (behind a VPN, intranet - etc), you cannot commit. If you want to make a copy of your code, you have to literally copy/paste it. With Git, you do not have this problem. Your local copy is a repository, and you can commit to it and get all benefits of source control. When you regain connectivity to the main repository, you can commit against it. Another thing for consideration is that Git tracks content rather than files. Branches are lightweight and merging is easy, and I mean really easy.
    It's distributed, basically every repository is a branch. It's much easier to develop concurrently and collaboratively than with Subversion, in my opinion. It also makes offline development possible. It doesn't impose any workflow, as seen on the above linked website, there are many workflows possible with Git. A Subversion-style workflow is easily mimicked.
    Incentivized
    Read full review
    HCLSoftware
    Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues
    Incentivized
    Read full review
    Return on Investment
    Open Source
    • Git has saved our organization countless hours having to manually trace code to a breaking change or manage conflicting changes. It has no equal when it comes to scalability or manageability.
    • Git has allowed our engineering team to build code reviews into its workflow by preventing a developer from approving or merging in their own code; instead, all proposed changes are reviewed by another engineer to assess the impact of the code and whether or not it should be merged in first. This greatly reduces the likelihood of breaking changes getting into production.
    • Git has at times created some confusion among developers about what to do if they accidentally commit a change they decide later they want to roll back. There are multiple ways to address this problem and the best available option may not be obvious in all cases.
    Incentivized
    Read full review
    HCLSoftware
    • There are countless implementations to accomplish the same thing, and so many configurations are required.
    • Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen.
    • Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan.
    Incentivized
    Read full review
    ScreenShots

    HCL AppScan Screenshots

    Screenshot of Cloud Security: AppScan will scan Docker containers and container images to ensure that third party components have not introduced vulnerabilities to an application. Software composition analysis (SCA) tools help organizations inventory third-party commercial and open source components used within their software to understand which components and versions are being used and to identify security vulnerabilities affecting those components.Screenshot of API Testing: This dangerous attack vector can be secured by identifying vulnerable third-party components, automating and integrating API testing and detecting issues in the IDE.Screenshot of Auto Issue Correlation: AppScan leverages three technologies (DAST, SAST, IAST) to enrich results, validate fixes and reduce the number remediation tasks by grouping issues together.Screenshot of 30+ Code Languages Supported: HCL AppScan offers an extensive list of supported code languages.