HCL AppScan vs. Trend Micro Cloud One - Application Security

In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.

Incentivized

Scenarios where it's well suited - 1) AWS cloud environments where application security and ZTN is a must. 2) One-stop-shop for centralized discovery of apps/workloads. 3) Custom reporting client needs. 4) CI/CD pipeline - easy to design DevOps cycles.

Incentivized

• AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10.
• Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers.
• Technical reports include remediation information and cross reference CVSS scores
• Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance

Incentivized

• Easy integration with AWS environment
• holistic protection - workload and network security
• Monitoring capabilities - SIEM tools which helps in RCA analysis.

Incentivized

• It can have a FAQ session in the Application itself.
• It can recommend the fix for the error that occurred during the scan.
• Like its storing multiple manuals explore, It should have the capability of storing multiple logins.

Incentivized

• Found a tad difficult in case of hybrid cloud environments - VMware specific etc
• API calls did not work well with only a few applications ( SNOW etc), most of it is fine
• Professional services / Support - dedicated customer support should be more proactive, flexible

Incentivized

Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues

Incentivized

1) flexible customer support and PoV assistance as compared to other vendors 2) Quick TAT turnaround, and easy sampling - Automation features are smooth to use and leverage 3) Our client was interested in this solution since they heard it from one of their other partners from USA - So, this solution was already a step ahead, we just had to pick it up and get used to it

Incentivized

• There are countless implementations to accomplish the same thing, and so many configurations are required.
• Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen.
• Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan.

Incentivized

• Our single PoV helped few customers already - RoI return - Excellent
• GTM strategy - Go to Market worked - Saved potentially 500k USD minimum for client - within few months
• Allianz assistance - client support in planning helped to further smoothen the RoI cycle, we have planned upto FY 23 for our healthcare client

Incentivized