HCL AppScan Reviews in May 2025: User Ratings, Pros & Cons

"Highly recommended for application security"

What do you like best about HCL AppScan? Various features it provides, starting from recorded login, manual explore and JIRA integration What do you dislike about HCL AppScan? JIRA integration should be more customisable What problems is HCL AppScan solving and how is that benefiting you? It is helping is vulnerability scans and automating them

"To Go DAST Scanner"

What do you like best about HCL AppScan? HCL AppScan is best in issue reported and providing recommendations, the best part is API Scan , manual crawling and external browser. What do you dislike about HCL AppScan? Sometimes the application gets hung and reporting in csv is not available What problems is HCL AppScan solving and how is that benefiting you? less false positive and negative so basically less noise in reporting

"Web partner"

What do you like best about HCL AppScan? It provides trustful assessment and easy to use. What do you dislike about HCL AppScan? The support in Hong Kong and China area is not strong. What problems is HCL AppScan solving and how is that benefiting you? It helps to protect Web application.

"Product strong for almost 20 years"

What do you like best about HCL AppScan? The product has always been consistent and delivers excellent results. The automated login process is a key function missing in competitor systems. Started using the tool in the early 2000's. What do you dislike about HCL AppScan? The tool is great. I don't care that the sales and dev branches are pushing the cloud solution. I like to maintain control of what reaches into my network. What problems is HCL AppScan solving and how is that benefiting ...

"A tool a bit immature"

What do you like best about HCL AppScan? It was easy to use AppScan on Cloud with the IDE plugin or maven one What do you dislike about HCL AppScan? The results may differ a lot based on the plugin used (IDE, maven, AppScanGo). Moreover, most of the results were false positive What problems is HCL AppScan solving and how is that benefiting you? SAST analysis of a mobile application and a maven project

"Appscan Standard really amazing tool with lots of features"

What do you like best about HCL AppScan? The best part of Appscan is the record login features for the critical SSO authentication-based application to get full authenticated scans. What do you dislike about HCL AppScan? The interface need to modified for the standard version What problems is HCL AppScan solving and how is that benefiting you? Tried many tools for our in-house applications scanning, which have in-house build SSO login, but all failed to do an authentication scan fails. ...

"Powerful Security Product"

What do you like best about HCL AppScan? Great Language coverage, SAST scan allows us at the code level, and DAST Scan at the app level does a great job of finding the issues with minimal false positives. What do you dislike about HCL AppScan? Long DAST Scans (Which can be controlled though) and error outs and need to restart the test What problems is HCL AppScan solving and how is that benefiting you? Finding out vulnerability issues in early life cycle using SAST and comprehensive with DAST.

"Good tool to perform SAST and DAST analyses"

What do you like best about HCL AppScan? The thing I like the most about AppScan is that it's easy to connect to our CI/CD pipeline and has a lot of built in connectors What do you dislike about HCL AppScan? I don't particularly like the high rate of false positives that emerges from the scans What problems is HCL AppScan solving and how is that benefiting you? AppScan is helping us write more secure code, and providing our customers with e-commerce websites that are more secure also in ...

"AppScan is the foundation of our internal penetration testing"

What do you like best about HCL AppScan? AppScan is tunable allowing us to test the essentials of our deployed software. We can configure it to accomodate our MFA infrastructure while continuing automated testing. This frees time for our analysts and allows us to focus our manual testing efforts on areas of concern flagged by AppScan. What do you dislike about HCL AppScan? Some minor false positives frequently crop up. While we can turn these off, it seems that some of the default tests are ...

"Great & much more Secure application. HCL commited for better service & App scan Security."

What do you like best about HCL AppScan? Security Mechanism of app scan is reliable and great. What do you dislike about HCL AppScan? All looks good for me as more secure place What problems is HCL AppScan solving and how is that benefiting you? More secure an reliable solution for any infra