Try our new research platform with insights from 80,000+ expert users

HCL AppScan vs Trustwave App Scanner [EOL] comparison

HCLSoftware and Trustwave are both solutions in the Application Security Tools category. Additionally, 83% of HCLSoftware users are willing to recommend the solution, compared to 66% of Trustwave users who would recommend it.
HCL AppScan
Read 43 HCL AppScan reviews
  • 4,632 Views
  • 3,381 Comparison Views
83% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between HCL AppScan and Trustwave App Scanner [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Application Security Tools Report (Updated: August 2025).
Buyer's Guide
Application Security Tools
August 2025
Download the complete report
Helped 866,088 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HCL AppScan
Average Rating
7.8
Reviews Sentiment
6.1
Number of Reviews
43
Ranking in other categories
Application Security Tools (15th), Static Application Security Testing (SAST) (15th), Dynamic Application Security Testing (DAST) (1st)
Trustwave App Scanner [EOL]
Average Rating
7.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Sthembiso Zondi - PeerSpot reviewer
Has a straightforward setup process and valuable security features
We use AppScan primarily for security testing and performance monitoring across our systems The product's features for comprehensive code analysis (static) and live environment testing (dynamic) have significantly enhanced our ability to identify and address vulnerabilities, improving overall…
Read full review
Securityd276 - PeerSpot reviewer
Stable solution that has increased the maturity of our security program
I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities. For the most part, it fits our needs but a little more flexibility would be great. I would also like to have more information on AI. If we start to deploy AI in our infrastructure, does it cover that as well?
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is useful, particularly in its sensitivity and scanning capabilities."
"The HCL AppScan turnaround time for Burp Suite or any new feature request is pretty good, and that is why we are sticking with the HCL."
"You can easily find particular features and functions through the UI."
"The solution is cheap."
"I like the recording feature."
"AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further."
"The solution is easy to install. I would rate the product's setup between six to seven out of ten. The deployment time depends on the applications that need to be scanned. We have a development and operations team to take care of the product's maintenance."
"We leverage it as a quality check against code."
More HCL AppScan pros
"The stability is great. We haven't had any issues at all with it."
 

Cons

"IBM Security AppScan needs to add performance optimization for quickly scanning the target web applications."
"Many silly false positives are produced."
"The dashboard, for AppScan or the Fortified fast tool, which we use needs to be improved."
"The penetration testing feature should be included."
"I would like to see the roadmap for this product. We are still waiting to see it as we have only so many resources."
"We have experienced challenges when trying to integrate this solution with other products. When you compare it with the other SecOps products, the quality of the output is too low. It is not a new-age product. It is very outdated."
"They could incorporate AI to enhance vulnerability detection and improve the product's reporting capabilities."
"​IBM Security AppScan Source is rather hard to use​."
More HCL AppScan cons
"I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities."
 

Pricing and Cost Advice

"The tool was expensive."
"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."
"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."
"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"Our clients are willing to pay the extra money. It is expensive."
"The solution is moderately priced."
"HCL AppScan is expensive."
More HCL AppScan pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
866,088 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
12%
Government
10%
Manufacturing Company
10%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise6
Large Enterprise31
No data available
 

Questions from the Community

What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
See all answers
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
See all answers
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
See all answers
Ask a question
Earn 20 points
 

Comparisons

Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
Compared 12% of the time
SonarQube Server (formerly SonarQube) vs HCL AppScan Logo
SonarQube Server (formerly SonarQube) vs HCL AppScan
Compared 12% of the time
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Compared 11% of the time
OWASP Zap vs HCL AppScan Logo
OWASP Zap vs HCL AppScan
Compared 8% of the time
Checkmarx One vs HCL AppScan Logo
Checkmarx One vs HCL AppScan
Compared 7% of the time
More HCL AppScan Competitors
No data available
 

Product Reports

Buyer's Guide
HCL AppScan
August 2025
HCL AppScan reportDownload HCL AppScan product report
Buyer's Guide
Application Security Tools
August 2025
Trustwave App Scanner [EOL] reportDownload Trustwave App Scanner [EOL] product report
 

Also Known As

IBM Security AppScan, Rational AppScan, AppScan
Hailstorm, Cenzic Hailstorm
 

Overview

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware
Provides ability to test applications for security vulnerabilities, security policies and regulatory compliance.
Trustwave
 

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Leading Health Insurer
Buyer's Guide
Application Security Tools
August 2025
Download Free Report
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: August 2025.
DOWNLOAD NOW
866,088 professionals have used our research since 2012.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.