HCL AppScan insights
November 07, 2021

HCL AppScan insights

Franck Gafsou | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with HCL AppScan (formerly from IBM)

HCL AppScan provides mobile application scan with predefined templates integration with common code repositories supported Supports 13+ languages including C/C++, COBOL, ColdFusion, Java™ , Android, JSP, JavaScript, Perl, PHP, PL/SQL/T-SQL, C#, ASP.NET, and VB.NET on the other hand, it requires upfront planning for setup and configuration the recording of the application is crucial to have valuable test completion There is quite a complex list of supported browsers May be resource intensive which can cause long run-times for dynamic scans the application crashes sometimes
  • learns behavior of each application to test application-specific vulnerabilities
  • Provides mobile application scan with predefined templates
  • simplify the upfront planning for configuration
  • improves the resource management to prevent from crashes and timeout
  • provides enterprise dashboards to classify and prioritize application assets based on business impact to maximize remediation efforts
  • learns behavior of each application to test application-specific vulnerabilities

Do you think HCL AppScan delivers good value for the price?

Not sure

Are you happy with HCL AppScan's feature set?

Yes

Did HCL AppScan live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of HCL AppScan go as expected?

I wasn't involved with the implementation phase

Would you buy HCL AppScan again?

Yes

strengths : identifies Static and Dynamic Security vulnerabilities, has IDE plugins for ease of use like VS Plugin,
Eclipse Plugin, IntelliJ, etc
Challenges : support build of code files prior to scan, offers limited static analysis features for data identification and
runtime data tracking