HCL AppScan vs. Oracle Application Testing Suite (legacy)

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
HCL AppScan
Score 4.4 out of 10
N/A
AppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.N/A
Oracle Application Testing Suite (legacy)
Score 8.0 out of 10
N/A
The Oracle Application Testing Suite is a legacy suite of tools. Oracle Application Testing Suite 13.1.0.1 shipped in 2017 was the last major release. Since then, two minor releases 13.2.0.1 and 13.3.0.1 were released with only smaller sets of new features.N/A
Pricing
HCL AppScanOracle Application Testing Suite (legacy)
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
HCL AppScanOracle Application Testing Suite (legacy)
Free Trial
YesNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
HCL AppScanOracle Application Testing Suite (legacy)
Best Alternatives
HCL AppScanOracle Application Testing Suite (legacy)
Small Businesses
GitLab
GitLab
Score 8.7 out of 10
BrowserStack
BrowserStack
Score 8.5 out of 10
Medium-sized Companies
Veracode
Veracode
Score 8.8 out of 10
ReadyAPI
ReadyAPI
Score 6.2 out of 10
Enterprises
Veracode
Veracode
Score 8.8 out of 10
SoapUI Open Source
SoapUI Open Source
Score 8.4 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
HCL AppScanOracle Application Testing Suite (legacy)
Likelihood to Recommend
8.3
(6 ratings)
9.0
(9 ratings)
User Testimonials
HCL AppScanOracle Application Testing Suite (legacy)
Likelihood to Recommend
HCLSoftware
In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
Read full review
Discontinued Products
It is extremely well suited for database upgrade testing as well as major upgrades of the E-business suite applications. It is less suited for performing this for minor patching efforts.
Read full review
Pros
HCLSoftware
  • AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10.
  • Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers.
  • Technical reports include remediation information and cross reference CVSS scores
  • Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance
Read full review
Discontinued Products
  • Load testing with useful graphical interface tools to watch real time performance
  • Flexible configuration for monitoring utilities
  • Historical tracking for baseline performance before and after upgrades
Read full review
Cons
HCLSoftware
  • It can have a FAQ session in the Application itself.
  • It can recommend the fix for the error that occurred during the scan.
  • Like its storing multiple manuals explore, It should have the capability of storing multiple logins.
Read full review
Discontinued Products
  • Learning Oracles testing language "OpenScript" is a challenge, and for less technical people could be a problem
  • Sometimes the applications automatic updates cause more problems than they solve
  • The cost of the suite is higher than some competing applications
Read full review
Alternatives Considered
HCLSoftware
Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues
Read full review
Discontinued Products
Oracle Application Testing Suite is much more useful and we work more than ZAPTEST because it is a life cycle tool that allows us to define and manage your application test process, validate the functionality of the application and ensure that your applications work under load. Implement web applications and web services in less time while maximizing the efficiency of the tests.
Read full review
Return on Investment
HCLSoftware
  • There are countless implementations to accomplish the same thing, and so many configurations are required.
  • Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen.
  • Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan.
Read full review
Discontinued Products
  • Some of our applications had struggled with performing well under high load times and was adversely affecting the usage of our client services. Using Oracle Application Testing Suite we were able to diagnose some of the architectural flaws and helped make our apps more performant.
Read full review
ScreenShots

HCL AppScan Screenshots

Screenshot of Cloud Security: AppScan will scan Docker containers and container images to ensure that third party components have not introduced vulnerabilities to an application. Software composition analysis (SCA) tools help organizations inventory third-party commercial and open source components used within their software to understand which components and versions are being used and to identify security vulnerabilities affecting those components.Screenshot of API Testing: This dangerous attack vector can be secured by identifying vulnerable third-party components, automating and integrating API testing and detecting issues in the IDE.Screenshot of Auto Issue Correlation: AppScan leverages three technologies (DAST, SAST, IAST) to enrich results, validate fixes and reduce the number remediation tasks by grouping issues together.Screenshot of 30+ Code Languages Supported: HCL AppScan offers an extensive list of supported code languages.