HCL AppScan Reviews in June 2026: User Ratings, Pros & Cons

"Great & much more Secure application. HCL commited for better service & App scan Security."

What do you like best about HCL AppScan? Security Mechanism of app scan is reliable and great. What do you dislike about HCL AppScan? All looks good for me as more secure place What problems is HCL AppScan solving and how is that benefiting you? More secure an reliable solution for any infra

"AppScan is the foundation of our internal penetration testing"

What do you like best about HCL AppScan? AppScan is tunable allowing us to test the essentials of our deployed software. We can configure it to accomodate our MFA infrastructure while continuing automated testing. This frees time for our analysts and allows us to focus our manual testing efforts on areas of concern flagged by AppScan. What do you dislike about HCL AppScan? Some minor false positives frequently crop up. While we can turn these off, it seems that some of the default tests are ...

"Easy to use commercial Vapt and code review tool"

What do you like best about HCL AppScan? Appscan let also not veyskilled people to effectively execute a vapt or deep code review What do you dislike about HCL AppScan? A little rigid regarding the configuration. Had problems with very big code review using the on cloud application What problems is HCL AppScan solving and how is that benefiting you? Better than owasp for not trained users

"APPSCAN covers the needs for all scan modes"

What do you like best about HCL AppScan? APPSCAN is the best tool fast to use and get results at the right level of analysis. The user can quickly request the scans with a limited exploration or a deep and accurate one, as well as a specific security rule. The fact that Inteligent Analyses are supplied it save time for the Security Engineers during the triage, as well as for the developpers who have the Fix Group feature to quickly identify where to do the corrections to resolve several ...

"Hcl appscan"

What do you like best about HCL AppScan? Great to have tool for appsec.really covers all vulnerabilities in DAST with less false positive.pluse setting up the solution is super easy. What do you dislike about HCL AppScan? Sometime solution goes in session detection problem that should be fixed. What problems is HCL AppScan solving and how is that benefiting you? Application Penetration testing

"One of the best solution for VA/PT activities"

What do you like best about HCL AppScan? The solution is logic and the GUI is intuitive to use What do you dislike about HCL AppScan? According to my opinion there are no dislike points to notify Recommendations to others considering HCL AppScan: We compared it with Fortify web inspect, both of them are valid solution, choose the one you feel better What problems is HCL AppScan solving and how is that benefiting you? We use it to perform SAST and DAST analysis of web and mobile app, later ...

"Best Tools for application testing"

What do you like best about HCL AppScan? User-friendly application, the best tool for find vulnerability and application testing What do you dislike about HCL AppScan? this tool take some Time to scan any web application What problems is HCL AppScan solving and how is that benefiting you? It is beneficial for any organization to secure web application, find the vulnerability and patch it accordingly

"HCL Appscan Standard Not a Great DAST Tool to be used for 2FA MFA Applications"

What do you like best about HCL AppScan? Easy Navigation & configuration of scan policies etc What do you dislike about HCL AppScan? Reported false positive are high in numbers which lets lot of manual work What problems is HCL AppScan solving and how is that benefiting you? no benefits I feel its big waste product I say only HCL appscan Standard DAST tool

"Most effective tool for Vulnerability Awarness"

What do you like best about HCL AppScan? Vulnerability database always up to date and Also user friendly surface with effective reporting options What do you dislike about HCL AppScan? Global support response can be more faster. What problems is HCL AppScan solving and how is that benefiting you? Vulnerability assesment for new or existing software .Also sometimes I detected bugs on custom reporting area.

"price/performance web application vulnerability"

What do you like best about HCL AppScan? In report side, developers can understand details and solution method of vulnerability. On my side(security engineer) I have been tested AppScan with 2 other rival. The vulnerability analysis AppScan is doing is quite sufficient. In my review I think that was enough for OWASP TOP10 requirements. What do you dislike about HCL AppScan? User interface could be more colorful :) What problems is HCL AppScan solving and how is that benefiting ...