Likelihood to Recommend In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
Read full review Rapid7 AppSpider could be your default DAST (Dynamic Application Security Testing), it covers the OWASP top 10 for web and APIs. Great tools, with a very nice and understandable report and analytics, work excellent for one-shot or continuous monitoring of your web assets. Also has a fair amount of integrations with other popular tools.
Read full review Pros AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10. Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers. Technical reports include remediation information and cross reference CVSS scores Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance Read full review Does a great job scanning Single Page Apps as well as APIs etc. We use this weekly and have faced no scan errors due to process failures or accidentally DoSing etc. Read full review Cons It can have a FAQ session in the Application itself. It can recommend the fix for the error that occurred during the scan. Like its storing multiple manuals explore, It should have the capability of storing multiple logins. Read full review Scan might be slow compared to other tools. Not a lot of training on the vendor side. Read full review Alternatives Considered Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues
Read full review BurpSuite isn't a competitor necessarily but still for the price of a few hundred dollars per user it is a great tool, however, AppSpider blew it out of the water with its accuracy in terms of vulnerabilities reported as well as other aspects such as UI, customer support etc.
Read full review Return on Investment There are countless implementations to accomplish the same thing, and so many configurations are required. Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen. Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan. Read full review Great ROI for consultant projects. Read full review ScreenShots