No more typing reviews! Try our Samantha, our new voice AI agent.
HCL AppScan Logo

HCL AppScan Reviews

Vendor: HCLSoftware
3.8 out of 5
Leave a review

What is HCL AppScan?

HCL AppScan offers quick vulnerability detection with effective SDLC integration and is known for its user-friendly interface and seamless security integration.

Get the HCL AppScan Buyer's Guide and find out what your peers are saying about HCL AppScan, SonarQube, Snyk and more!
HCL AppScan is the #6 ranked solution in top Dynamic Application Security Testing (DAST) solutions, #16 ranked solution in AST tools, and #19 ranked solution in application security solutions. PeerSpot users give HCL AppScan an average rating of 7.6 out of 10. HCL AppScan is most commonly compared to SonarQube: HCL AppScan vs SonarQube. HCL AppScan is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 11% of all views.
Buyer's Guide
HCL AppScan
April 2026
Get the report
Helped 893,164 peers since 2012

Featured HCL AppScan reviews

Read more reviews

HCL AppScan mindshare

Product category:
Application Security Tools
As of May 2026, the mindshare of HCL AppScan in the Application Security Tools category stands at 2.4%, down from 2.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
HCL AppScan2.4%
SonarQube13.6%
Checkmarx One8.8%
Other75.2%
Application Security Tools

PeerResearch reports based on HCL AppScan reviews

TypeTitleDate
CategoryApplication Security ToolsMay 8, 2026Download
ProductReviews, tips, and advice from real usersMay 8, 2026Download
ComparisonHCL AppScan vs SonarQubeMay 8, 2026Download
ComparisonHCL AppScan vs Checkmarx OneMay 8, 2026Download
ComparisonHCL AppScan vs VeracodeMay 8, 2026Download
Suggested products
TitleRatingMindshareRecommending
SonarQube4.013.6%84%136 interviewsAdd to research
Snyk4.15.1%100%51 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

HCL AppScan offers valuable features such as PCI compliance templates, ease of use, rapid code scanning, extensive vulnerability detection, effective static and dynamic testing, multilingual support, custom rules, low false-positive rate, and intuitive user interface. Users appreciate its scalability, security practices enforcement, API capabilities, integration with SDLC, AI-powered enhancements, QR code scanning, and ability to handle sensitive data protection.
  • "I mainly use AppScan for vulnerability scanning and database bridging."
  • "The dynamic scan, the DAST tool, dynamic applications scanning and testing tool, is great."
  • "The support I have received has been good."

Room for Improvement

HCL AppScan's areas for enhancement include better false positive management, integration with other tools, and extended mobile support. Users indicate improved performance is needed, especially with large scans. The system's usability and dashboard interface require refinement. More extensive language and AI integration, alongside fortified security measures, are necessary. Expanding database size and improving technical support are noted. Users also seek better pricing models and automation alerts. Enhancements in CI/CD integration and support for containers are desired.
  • "AppScan is too complicated and should be made more user-friendly."
  • "The performance could be better. Sometimes it doesn't work so well."
  • "The solution could improve by having a mobile version."

ROI

Organizations reported a 50 percent return from HCL AppScan. In Brazil, users witnessed a 20 percent cost reduction. It enhances microservices-led architecture by minimizing errors and defects, integrating DevOps and IT pipelines, and improving application security post-deployment. Many banks benefited from cost savings and observed returns within six months. Some users could not provide financial insights.

Pricing

Enterprise users perceive HCL AppScan's pricing as generally expensive, though some find it cost-effective compared to competitors like Veracode. Users appreciate the one-time purchase option without ongoing license fees, while others utilize a token-based system and find it convenient for scanning needs. Discounts are occasionally available, but many users suggest pricing could be more competitive. Overall, costs reflect the premium features offered, and clients are often willing to invest for its encryption security scanning capabilities.
  • "The product is moderately priced, though it's an investment due to extensive code analysis needs."
  • "The solution is cheap."
  • "The product has premium pricing and could be more competitive."

Popular Use Cases

The primary use case of HCL AppScan involves ensuring application security through static and dynamic analysis, vulnerability detection, and security assessment. Many use it for DevOps and DevSecOps environments, integrating it into CI/CD pipelines. It supports scanning web interfaces and applications both on-premise and in cloud settings. Users highlight its ability to detect issues like SQL injections and perform security testing as part of the development and quality assurance processes.

Service and Support

HCL AppScan's customer service is mostly responsive, fast, and knowledgeable. Users report satisfaction with transitions and operational responses. However, some express a need for more regional support, particularly in the Gulf. While some praise is given for helpfulness and user-friendliness, there are mentions of delays due to time differences and criticisms of declining service quality since changing from IBM. Comparisons indicate Veracode may deliver superior assistance and regular communication.

Deployment

Many find HCL AppScan's initial setup straightforward, describing it as easy and quick, typically taking one to two days. Some experience complexity, especially with integration and large clients. Users actively engage professional services for customization. Feedback highlights the simplicity of cloud deployment, although certain setups require experienced personnel. Setup ratings range from six to ten out of ten, with deployment duration varying based on specific requirements and integrations.

Scalability

Users generally find HCL AppScan's scalability to be favorable with some exceptions. Many report seamless scaling capabilities, particularly in cloud-based scenarios, attributing ease in adaptation and expansion to program design and hardware allocation. However, others indicate limitations, like license restrictions and initial setup challenges. Test experiences vary, with some organizations noting efficient scaling across environments, while others suggest adjustments in infrastructure to meet larger-scale requirements. Overall user feedback leans towards a positive view of scalability.

Stability

HCL AppScan is consistently stable, with most users experiencing no issues. Some note minor glitches, often attributed to hardware rather than the application itself. Ratings often range from seven to eight out of ten. Users highlight strong reliability, reporting that it handles heavy workloads effectively. Only small stability concerns are mentioned during intense scanning or with older versions, but recent updates seem to have resolved these. Stability is enhanced when proper resources are utilized.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our HCL AppScan Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business11
Midsize Enterprise4
Large Enterprise20
By reviewers
By visitors reading reviews
Company SizeCount
Small Business180
Midsize Enterprise100
Large Enterprise329
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Government
10%
Manufacturing Company
9%
Construction Company
5%
Comms Service Provider
5%
Healthcare Company
5%
Performing Arts
5%
Retailer
4%
Outsourcing Company
4%
Educational Organization
3%
Real Estate/Law Firm
3%
Insurance Company
3%
Energy/Utilities Company
3%
Marketing Services Firm
2%
Media Company
2%
University
2%
Hospitality Company
2%
Consumer Goods Company
2%
Transportation Company
1%
Pharma/Biotech Company
1%
Legal Firm
1%
Non Profit
1%

Compare HCL AppScan with alternative products

Go!

Learn more about HCL AppScan

HCL AppScan provides dynamic and static scanning to identify vulnerabilities like XSS and SQL injection. It integrates well into CI/CD pipelines, supports multiple languages, and offers web and dynamic scanning, helping businesses ensure security across development lifecycles. Users benefit from API coverage, Postman integration, and its ability to function in cloud and on-premise environments, facilitating a shift from DevOps to DevSecOps practices.

What features define HCL AppScan?
  • User-friendly interface: Simplifies navigation and usage.
  • Vulnerability detection: Quickly identifies issues like XSS and SQL injection.
  • Integration with SDLC: Seamlessly blends with development processes.
  • Dynamic scanning: Offers comprehensive security evaluations.
  • Multiple language support: Supports diverse programming environments.
What benefits should users consider?
  • Scalability: Adapts to growing needs and projects.
  • Low false-positive rates: Delivers accurate and reliable results.
  • Detailed reporting: Provides comprehensive vulnerability insights.
  • Effective integration: Enhances CI/CD pipeline security.

HCL AppScan is leveraged in sectors requiring rigorous security checks, such as finance and healthcare, where it conducts comprehensive scans and offers insights into potential vulnerabilities. Its robust scanning capabilities aid companies in maintaining compliance and security standards.

HCL AppScan was previously known as IBM Security AppScan, Rational AppScan, AppScan.

HCL AppScan customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

Related questions

  • 32
Difference between IBM Appscan and HP fortify software
  • 30
Which solution do you prefer: Fortify WebInspect or HCL AppScan?
  • 227
If you had to both encrypt and compress data during transmission, which would you do first and why?
  • 153
When evaluating Application Security, what aspect do you think is the most important to look for?
  • 274
What are the threats associated with using ‘bogus’ cybersecurity tools?
  • 243
What are the Top 5 cybersecurity trends in 2022?
  • 141
Which application security solutions include both vulnerability scans and quality checks?
  • 153
We're evaluating Tripwire, what else should we consider?
  • 360
Is SonarQube the best tool for static analysis?
  • 126
Why Do I Need Application Security Software?

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)

Popular Comparisons

Popular Comparisons
SonarQube vs HCL AppScan Logo
SonarQube vs HCL AppScan
Snyk vs HCL AppScan Logo
Snyk vs HCL AppScan
Checkmarx One vs HCL AppScan Logo
Checkmarx One vs HCL AppScan
GitLab vs HCL AppScan Logo
GitLab vs HCL AppScan
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Coverity Static vs HCL AppScan Logo
Coverity Static vs HCL AppScan
Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
PortSwigger Burp Suite Professional vs HCL AppScan Logo
PortSwigger Burp Suite Professional vs HCL AppScan
Mend.io vs HCL AppScan Logo
Mend.io vs HCL AppScan
OpenText Core Application Security vs HCL AppScan Logo
OpenText Core Application Security vs HCL AppScan
Sonatype Lifecycle vs HCL AppScan Logo
Sonatype Lifecycle vs HCL AppScan
GitHub Advanced Security vs HCL AppScan Logo
GitHub Advanced Security vs HCL AppScan
OWASP Zap vs HCL AppScan Logo
OWASP Zap vs HCL AppScan
Qualys Web Application Scanning vs HCL AppScan Logo
Qualys Web Application Scanning vs HCL AppScan
Invicti vs HCL AppScan Logo
Invicti vs HCL AppScan
See all alternatives
 
HCL AppScan Reviews Summary
Author infoRatingReview Summary
Founder Director at Techsa Services4.5I've used HCL AppScan for three months and found it effective in identifying security issues, though its reporting and SCA features need improvement; deployment was easy, and I'd recommend it for regulated industries like finance and healthcare.
Associate Principal, Software Engineering at LTI - Larsen & Toubro Infotech3.5I use HCL AppScan primarily for security, comparing it with tools like Veracode. Its strengths lie in vulnerability detection and AI features, though it needs improvement in false positive management, customer support, and bug reporting accuracy.
QA manager at SmartStream Technologies ltd.4.0I use HCL AppScan for security scanning in my company. The most valuable feature is its scanning capabilities. However, the technical support team needs improvement, especially in response times. I also compared it with Veracode but found limited information.
Senior Manager at Airtel4.0I use HCL AppScan primarily for vulnerability scanning on the network side, and I find the reporting feature to be its most valuable aspect. However, I believe it would benefit from including a penetration testing feature.
Head of Software Engineering at ronaldmariah@gmail.com4.0We use HCL AppScan for security testing and performance monitoring. It has valuable security features for identifying code issues and potential threats. However, it could benefit from AI integration to improve vulnerability detection and reporting capabilities.
Cyber Security Architect and Presales Consultant at Kyndryl4.0We use HCL AppScan for SAST and DAST, integrating it into our CI/CD pipelines for enhanced security testing. While it excels in testing, it lacks software component analysis and container scanning. It adds value in reducing errors and improving application security.
Software Engineer at Inspire for Solutions Development4.5I use HCL AppScan for scanning vulnerabilities and generating reports, valuing Postman for its precision and efficiency. While cost-efficient, HCL could improve by expanding its database and incorporating AI features to simplify manual tasks.
Mechanical maintenance technician at SAQ5.0I use HCL AppScan for securing applications through its integration with the SDLC, which facilitates vulnerability scanning. Its ROI is evident with a 20% cost saving. Transitioning from Fortify, I found AppScan offers better results and superior support.