Try our new research platform with insights from 80,000+ expert users

Fortify Software Security Center vs HCL AppScan comparison

OpenText and HCLSoftware are both solutions in the Static Application Security Testing (SAST) category. OpenText is ranked #30 with an average rating of 8.0, while HCLSoftware is ranked #15 with an average rating of 8.3. OpenText holds a 0.4% mindshare in SAST, compared to HCLSoftware ’s 2.6% mindshare. Additionally, 100% of OpenText users are willing to recommend the solution, compared to 83% of HCLSoftware users who would recommend it.
Fortify Software Security C...
Read 6 Fortify Software Security Center reviews
  • 490 Views
  • 51 Comparison Views
100% willing to recommend
HCL AppScan
Read 43 HCL AppScan reviews
  • 3,824 Views
  • 465 Comparison Views
83% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 8, 2024

HCL AppScan and Fortify Software Security Center compete in the security solutions category. Fortify seems to have the upper hand in features due to its comprehensive offerings, justifying its higher price point, while HCL receives praise for pricing and support.

Features: HCL AppScan offers effective risk assessment tools, integration capabilities, and a user-friendly interface. Fortify Software Security Center provides extensive language support, detailed vulnerability reports, and a broader feature set appealing to enterprises with complex needs.

Room for Improvement: HCL AppScan requires better scalability, enhanced integration with third-party tools, and improved performance speed. Fortify Software Security Center needs a more intuitive setup process, a streamlined user interface, and reduced complexity in certain features.

Ease of Deployment and Customer Service: HCL AppScan is noted for straightforward deployment and responsive customer support. Fortify Software Security Center comes with a steeper learning curve but offers dedicated support once the process is navigated.

Pricing and ROI: HCL AppScan users appreciate its competitive setup costs and view it as a cost-effective solution with satisfactory ROI. Fortify Software Security Center, despite higher initial expenses, offers a return that justifies its investment for enterprises using its capabilities fully, making it worth its premium due to strategic benefits realized over time.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Fortify Software Security Center vs. HCL AppScan Report (Updated: June 2025).
Buyer's Guide
Fortify Software Security Center vs. HCL AppScan
June 2025
Download the complete report
Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortify Software Security C...
Ranking in Static Application Security Testing (SAST)
30th
Average Rating
7.8
Reviews Sentiment
8.3
Number of Reviews
6
Ranking in other categories
No ranking in other categories
HCL AppScan
Ranking in Static Application Security Testing (SAST)
15th
Average Rating
7.8
Reviews Sentiment
6.1
Number of Reviews
43
Ranking in other categories
Application Security Tools (15th), Dynamic Application Security Testing (DAST) (1st)
 

Mindshare comparison

As of July 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.4%, up from 0.2% compared to the previous year. The mindshare of HCL AppScan is 2.6%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Jonathan Steyn - PeerSpot reviewer
Comprehensive vulnerability analysis and customization features with decent pricing
Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.
Read full review
Sthembiso Zondi - PeerSpot reviewer
Has a straightforward setup process and valuable security features
We use AppScan primarily for security testing and performance monitoring across our systems The product's features for comprehensive code analysis (static) and live environment testing (dynamic) have significantly enhanced our ability to identify and address vulnerabilities, improving overall…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The overall rating for this tool is ten out of ten."
"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."
"The reporting is very useful because you can always view an entire list of the issues that you have."
"You can easily download the tool's rule packs and update them."
"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."
"This is a stable solution at the end of the day."
"I like the explanation of issues provided by Fortify Software Security Center."
"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."
"We are now deploying less defects to production."
"The security and the dashboard are the most valuable features."
"The UI was very intuitive."
"The solution is cheap."
"Usually when we deploy the application, there is a process for ethical hacking. The main benefit is that, the ethical hacking is almost clean, every time. So it's less cost, less effort, less time to production."
"The static scans are good, and the SaaS as well."
"This solution saves us time due to the low number of false positives detected."
More HCL AppScan pros
 

Cons

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."
"Improvements needed for Software Security Center include better aggregation views of datasets."
"I am not satisfied with the percentage of false positives, which is around eighteen percent."
"This solution is difficult to implement, and it should be made more comfortable for the end-users."
"We are having issues with false positives that need to be resolved."
"Improvements needed for Software Security Center include better aggregation views of datasets."
"Fortify Software Security Center's setup is really painful."
"The databases for HCL are small and have room for improvement."
"They could incorporate AI to enhance vulnerability detection and improve the product's reporting capabilities."
"The tool should improve its output. Scanning is not a challenge anymore since there are many such tools available in the market. The product needs to focus on how its output is being used by end users. It should be also more user-friendly. One of the major challenges is in the tool's integration with applications that need to be scanned. Sometimes, the scanning is not proper."
"AppScan needs to improve its handling of false positives."
"They have to improve support."
"Improving usability could enhance the overall experience with AppScan. It would be beneficial to make the solution more user-friendly, ensuring that everyone can easily navigate and utilize its features."
"The dashboard, for AppScan or the Fortified fast tool, which we use needs to be improved."
"It's a little bit basic when you talk about the Web Services. If AppScan improved its maturity on Web Services testing, that would be good."
More HCL AppScan cons
 

Pricing and Cost Advice

"The solution is priced fair."
"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."
"This is a costly solution that could be cheaper."
"The price is very expensive."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."
"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."
"Our clients are willing to pay the extra money. It is expensive."
"The tool was expensive."
"The solution is cheap."
"The product has premium pricing and could be more competitive."
More HCL AppScan pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
See recommendations
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
19%
Financial Services Firm
16%
Computer Software Company
11%
Government
7%
Computer Software Company
18%
Financial Services Firm
14%
Government
12%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Micro Focus Software Security Center?
You can easily download the tool's rule packs and update them.
See all answers
What is your experience regarding pricing and costs for Micro Focus Software Security Center?
In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...
See all answers
What needs improvement with Micro Focus Software Security Center?
I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.
See all answers
What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
See all answers
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
See all answers
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
See all answers
 

Comparisons

OpenText Core Application Security vs Fortify Software Security Center Logo
OpenText Core Application Security vs Fortify Software Security Center
Compared 56% of the time
Acunetix vs Fortify Software Security Center Logo
Acunetix vs Fortify Software Security Center
Compared 44% of the time
More Fortify Software Security Center Competitors
Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
Compared 14% of the time
SonarQube Server (formerly SonarQube) vs HCL AppScan Logo
SonarQube Server (formerly SonarQube) vs HCL AppScan
Compared 13% of the time
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Compared 10% of the time
OWASP Zap vs HCL AppScan Logo
OWASP Zap vs HCL AppScan
Compared 7% of the time
Checkmarx One vs HCL AppScan Logo
Checkmarx One vs HCL AppScan
Compared 7% of the time
More HCL AppScan Competitors
 

Product Reports

Buyer's Guide
Static Application Security Testing (SAST)
June 2025
Fortify Software Security Center reportDownload Fortify Software Security Center product report
Buyer's Guide
HCL AppScan
June 2025
HCL AppScan reportDownload HCL AppScan product report
 

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect
IBM Security AppScan, Rational AppScan, AppScan
 

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.
OpenText

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware
 

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon
Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Buyer's Guide
Fortify Software Security Center vs. HCL AppScan
June 2025
Free Report: Fortify Software Security Center vs. HCL AppScan
Find out what your peers are saying about Fortify Software Security Center vs. HCL AppScan and other solutions. Updated: June 2025.
DOWNLOAD NOW
860,592 professionals have used our research since 2012.
See our Fortify Software Security Center vs. HCL AppScan report.
See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.