HCL AppScan Reviews in June 2026: User Ratings, Pros & Cons

"Highly recommended for application security"

What do you like best about HCL AppScan? Various features it provides, starting from recorded login, manual explore and JIRA integration What do you dislike about HCL AppScan? JIRA integration should be more customisable What problems is HCL AppScan solving and how is that benefiting you? It is helping is vulnerability scans and automating them

"To Go DAST Scanner"

What do you like best about HCL AppScan? HCL AppScan is best in issue reported and providing recommendations, the best part is API Scan , manual crawling and external browser. What do you dislike about HCL AppScan? Sometimes the application gets hung and reporting in csv is not available What problems is HCL AppScan solving and how is that benefiting you? less false positive and negative so basically less noise in reporting

"Web partner"

What do you like best about HCL AppScan? It provides trustful assessment and easy to use. What do you dislike about HCL AppScan? The support in Hong Kong and China area is not strong. What problems is HCL AppScan solving and how is that benefiting you? It helps to protect Web application.

"Product strong for almost 20 years"

What do you like best about HCL AppScan? The product has always been consistent and delivers excellent results. The automated login process is a key function missing in competitor systems. Started using the tool in the early 2000's. What do you dislike about HCL AppScan? The tool is great. I don't care that the sales and dev branches are pushing the cloud solution. I like to maintain control of what reaches into my network. What problems is HCL AppScan solving and how is that benefiting ...

"A tool a bit immature"

What do you like best about HCL AppScan? It was easy to use AppScan on Cloud with the IDE plugin or maven one What do you dislike about HCL AppScan? The results may differ a lot based on the plugin used (IDE, maven, AppScanGo). Moreover, most of the results were false positive What problems is HCL AppScan solving and how is that benefiting you? SAST analysis of a mobile application and a maven project

"Appscan Standard really amazing tool with lots of features"

What do you like best about HCL AppScan? The best part of Appscan is the record login features for the critical SSO authentication-based application to get full authenticated scans. What do you dislike about HCL AppScan? The interface need to modified for the standard version What problems is HCL AppScan solving and how is that benefiting you? Tried many tools for our in-house applications scanning, which have in-house build SSO login, but all failed to do an authentication scan fails. ...

"Powerful Security Product"

What do you like best about HCL AppScan? Great Language coverage, SAST scan allows us at the code level, and DAST Scan at the app level does a great job of finding the issues with minimal false positives. What do you dislike about HCL AppScan? Long DAST Scans (Which can be controlled though) and error outs and need to restart the test What problems is HCL AppScan solving and how is that benefiting you? Finding out vulnerability issues in early life cycle using SAST and comprehensive with DAST.

"Good tool to perform SAST and DAST analyses"

What do you like best about HCL AppScan? The thing I like the most about AppScan is that it's easy to connect to our CI/CD pipeline and has a lot of built in connectors What do you dislike about HCL AppScan? I don't particularly like the high rate of false positives that emerges from the scans What problems is HCL AppScan solving and how is that benefiting you? AppScan is helping us write more secure code, and providing our customers with e-commerce websites that are more secure also in ...

"Easy to use and get the job done."

What do you like best about HCL AppScan? One of the best tools for app security. Easy to use and good documentation. What do you dislike about HCL AppScan? Cost can be a factor, considering there is a freeware option available. What problems is HCL AppScan solving and how is that benefiting you? security vulnerabilities scan for software and application

"Great experience"

What do you like best about HCL AppScan? How easy it is to use, being able to make granular reports as needed What do you dislike about HCL AppScan? The software update almost always gives a problem, I would like it to be more transparent What problems is HCL AppScan solving and how is that benefiting you? Software vulnerabilities and audits