HCL AppScan

HCL AppScan
Formerly from IBM

Score 8.4 out of 10
HCL AppScan

Overview

What is HCL AppScan?

AppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.
Read more

Recent Reviews

Read all reviews

Reviewer Pros & Cons

View all pros & cons

Video Reviews

Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of HCL AppScan, and make your voice heard!

Return to navigation

Pricing

View all pricing
N/A
Unavailable

What is HCL AppScan?

AppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting / Integration Services

Would you like us to let the vendor know that you want pricing?

17 people want pricing too

Alternatives Pricing

What is SonarQube?

SonarQube (formerly Sonar) is an open source application security solution.

What is Indusface WAS?

Indusface Web Application Scanner provides an application security audit to detect a range of high-risk Vulnerabilities, Malware, and Critical CVEs.

Return to navigation

Product Details

What is HCL AppScan?

AppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.

HCL AppScan Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

 (24)

Reviews

(1-6 of 6)
Companies can't remove reviews or game the system. Here's why
Score 7 out of 10
Vetted Review
Verified User
I would say that HCL AppScan is very simple to understand and use since it uses a user-friendly interface and the terminologies that are used in the interface of the application is very clear. We can automate a scan with any third party like Jenkins. The fact, I don't like is the time takes to execute the application, it should be better.
Sanjana Gupta | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
Brandon R Hudson | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Web applications these days have evolved too much and have become extremely complex. With AppScan, the configuration can be done through the GUI by using functions such as "login management" and "multi-step operation". To be honest, there are some parts of these functions that are difficult to understand, but I think we have to wait for more for the arrival of AI.
November 07, 2021

HCL AppScan insights

Score 7 out of 10
Vetted Review
Verified User
strengths : identifies Static and Dynamic Security vulnerabilities, has IDE plugins for ease of use like VS Plugin, Eclipse Plugin, IntelliJ, etc
Challenges : support build of code files prior to scan, offers limited static analysis features for data identification and runtime data tracking
Score 8 out of 10
Vetted Review
Verified User
HCL AppScan (formerly from IBM) is well suited for reducing security flaws in my team's secure code development. The software identifies a lot of issues automatically which helps us reduce delivery time and prevent security breaches. HCL AppScan (formerly from IBM) lacks innovation and automation functionalities, while other tools offer artificial intelligence-driven analysis that helps the team reduce time and money. Also, there is a need to reduce false-positives generated by the solution
Score 8 out of 10
Vetted Review
Verified User
This application is well suited for all web applications with the primary difficulty being that is does not handle federated logins.
However since we have validated our federation and vetted it well it is not a critical issue to bypass federation for scanning a site, only an inconvenience as we have to setup bypass authentication and then remove so that is cannot be used by an attacker.
Return to navigation