HCL AppScan vs OpenText Dynamic Application Security Testing comparison

HCL AppScan vs. OpenText Dynamic Application Security Testing

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

HCL AppScan

Ranking in Dynamic Application Security Testing (DAST)

1st

Average Rating

7.8

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Application Security Tools (15th), Static Application Security Testing (SAST) (14th)

OpenText Dynamic Applicatio...

Ranking in Dynamic Application Security Testing (DAST)

3rd

Average Rating

7.2

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

DevSecOps (8th)

Mindshare comparison

As of October 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of HCL AppScan is 14.0%, down from 22.6% compared to the previous year. The mindshare of OpenText Dynamic Application Security Testing is 17.7%, down from 21.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
HCL AppScan	14.0%
OpenText Dynamic Application Security Testing	17.7%
Other	68.3%

Dynamic Application Security Testing (DAST)

Featured Reviews

Gladwin Christian

QA manager at SmartStream Technologies ltd.

A useful tool to scan applications that can be easily installed

Given that we have been using HCL AppScan for many years, I think the setup process is not difficult at all. Sometimes, some issues stop or prevent my company from moving forward with the product's setup phase. We have to call HCL's support team and engage in long discussions to smoothly carry out the setup phase. In general, the product's setup phase is not difficult in our company. The solution is deployed on an on-premises model. The licenses for the solution are available only on cloud deployments nowadays. The solution is already installed in our environment. Every time a new release or software comes out from HCL, our company does a scan, which takes maybe a day or two.

Read full review

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The reporting part is the most valuable feature."

"The most valuable feature of the solution is Postman."

"It highlights, with several grades of severity, the types of vulnerabilities, so we can focus on the most severe security vulnerabilities in the code."

"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."

"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."

"We leverage it as a quality check against code."

"AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further."

"It was easy to set up."

More HCL AppScan pros

"The most valuable feature is the static analysis."

"The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients."

"It's a well-known platform for doing dynamic application scanning."

"I'm sorry, but there is no review content provided to extract a quote from."

"The user interface is ok and it is very simple to use."

"There are lots of small settings and tools, like an HTTP editor, that are very useful."

"The solution is easy to use."

"When we are integrating it with SSC, we're able to scan and trace and see all of the vulnerabilities. Comparison is easy in SSC."

More OpenText Dynamic Application Security Testing pros

Cons

"Many silly false positives are produced."

"They could add a software component analysis tool."

"The pricing has room for improvement."

"One thing which I think can be improved is the CI/CD Integration"

"I would love to see more containers. Many of the tools are great, they require an amount of configuration, setup and infrastructure. If most the applications were in a container, I think everything would be a little bit faster, because all our clients are now using containers."

"We would like to see a check in the specific vulnerabilities in mobile applications or rooted devices, such as jailbreaking devices."

"The solution could improve by having a mobile version."

"Sometimes it doesn't work so well."

More HCL AppScan cons

"The scanner could be better."

"One thing I would like to see them introduce is a cloud-based platform."

"Not sufficiently compatible with some of our systems."

"I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them."

"I would like WebInspect's scanning capability to be quicker."

"We have often encountered scanning errors."

"Lately, we've seen more false negatives."

"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."

More OpenText Dynamic Application Security Testing cons

Pricing and Cost Advice

"The product has premium pricing and could be more competitive."

"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."

"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."

"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."

"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."

"The solution is cheap."

"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."

"The product is moderately priced, though it's an investment due to extensive code analysis needs."

More HCL AppScan pricing and cost advice

"It’s a fair price for the solution."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"The pricing is not clear and while it is not high, it is difficult to understand."

"The price is okay."

"Fortify WebInspect is a very expensive product."

"This solution is very expensive."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

12%

Government

10%

Manufacturing Company

10%

Financial Services Firm

15%

Government

15%

Manufacturing Company

12%

Computer Software Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	6
Large Enterprise	31

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	15

Questions from the Community

What do you like most about HCL AppScan?

The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.

What needs improvement with HCL AppScan?

AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...

What is your primary use case for HCL AppScan?

The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...

What is your experience regarding pricing and costs for Fortify WebInspect?

While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...

What needs improvement with Fortify WebInspect?

WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...

What is your primary use case for Fortify WebInspect?

I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...

SonarQube Server (formerly SonarQube) vs HCL AppScan

Comparisons

Compared 12% of the time

Acunetix vs HCL AppScan

Compared 11% of the time

Veracode vs HCL AppScan

Compared 11% of the time

OWASP Zap vs HCL AppScan

Compared 8% of the time

GitHub Code Scanning vs HCL AppScan

Compared 4% of the time

More HCL AppScan Competitors

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Compared 18% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 11% of the time

Veracode vs OpenText Dynamic Application Security Testing

Compared 9% of the time

Acunetix vs OpenText Dynamic Application Security Testing

Compared 8% of the time

Qualys Web Application Scanning vs OpenText Dynamic Application Security Testing

Compared 7% of the time

More OpenText Dynamic Application Security Testing Competitors

Product Reports

HCL AppScan

Download HCL AppScan product report

OpenText Dynamic Application Security Testing

Download OpenText Dynamic Application Security Testing product report

OpenText Dynamic Application Security Testing report

Also Known As

IBM Security AppScan, Rational AppScan, AppScan

Micro Focus WebInspect, WebInspect

Overview

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

Aaron's

HCL AppScan vs. OpenText Dynamic Application Security Testing