Try our new research platform with insights from 80,000+ expert users

HCL AppScan vs Trustwave App Scanner [EOL] comparison

HCLSoftware and Trustwave are both solutions in the Application Security Tools category. Additionally, 83% of HCLSoftware users are willing to recommend the solution, compared to 66% of Trustwave users who would recommend it.
HCL AppScan
Read 43 HCL AppScan reviews
  • 4,780 Views
  • 3,489 Comparison Views
83% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between HCL AppScan and Trustwave App Scanner [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Application Security Tools Report (Updated: June 2025).
Buyer's Guide
Application Security Tools
June 2025
Download the complete report
Helped 861,524 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HCL AppScan
Average Rating
7.8
Reviews Sentiment
6.1
Number of Reviews
43
Ranking in other categories
Application Security Tools (15th), Static Application Security Testing (SAST) (15th), Dynamic Application Security Testing (DAST) (1st)
Trustwave App Scanner [EOL]
Average Rating
7.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Sthembiso Zondi - PeerSpot reviewer
Has a straightforward setup process and valuable security features
We use AppScan primarily for security testing and performance monitoring across our systems The product's features for comprehensive code analysis (static) and live environment testing (dynamic) have significantly enhanced our ability to identify and address vulnerabilities, improving overall…
Read full review
Securityd276 - PeerSpot reviewer
Stable solution that has increased the maturity of our security program
I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities. For the most part, it fits our needs but a little more flexibility would be great. I would also like to have more information on AI. If we start to deploy AI in our infrastructure, does it cover that as well?
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Compared to other tools only AppScan supports special language."
"The product is useful, particularly in its sensitivity and scanning capabilities."
"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."
"The solution is easy to install. I would rate the product's setup between six to seven out of ten. The deployment time depends on the applications that need to be scanned. We have a development and operations team to take care of the product's maintenance."
"It's generally a very user-friendly tool. Anyone can easily learn how to scan"
"For me, as a manager, it was the ease of use. Inserting security into the development process is not normally an easy project to do. The ability for the developer to actually use it and get results and focuses, that's what counted."
"It comes with all of the templates that we need. For example, we are a company that is regulated by PCI. In order to be PCI compliant, we have a lot of checks and procedures to which we have to comply."
"The most valuable feature of HCL AppScan is scanning QR codes."
More HCL AppScan pros
"The stability is great. We haven't had any issues at all with it."
 

Cons

"The product has some technical limitations."
"Sometimes it doesn't work so well."
"We have experienced challenges when trying to integrate this solution with other products. When you compare it with the other SecOps products, the quality of the output is too low. It is not a new-age product. It is very outdated."
"There is not a central management for static and dynamic."
"If HCL AppScan is able to alert the clients over email once the scan is complete, it would be great. Right now, HCL AppScan doesn't let me know if the scanning part is finished or not, because of which I have to come back and check mostly."
"​IBM Security AppScan Source is rather hard to use​."
"AppScan is too complicated and should be made more user-friendly."
"One thing which I think can be improved is the CI/CD Integration"
More HCL AppScan cons
"I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities."
 

Pricing and Cost Advice

"The tool was expensive."
"The solution is cheap."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"HCL AppScan is expensive."
"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."
"The price is very expensive."
"The product has premium pricing and could be more competitive."
"Our clients are willing to pay the extra money. It is expensive."
More HCL AppScan pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
14%
Government
11%
Manufacturing Company
9%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
See all answers
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
See all answers
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
See all answers
Ask a question
Earn 20 points
 

Comparisons

Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
Compared 14% of the time
SonarQube Server (formerly SonarQube) vs HCL AppScan Logo
SonarQube Server (formerly SonarQube) vs HCL AppScan
Compared 12% of the time
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Compared 11% of the time
OWASP Zap vs HCL AppScan Logo
OWASP Zap vs HCL AppScan
Compared 7% of the time
Checkmarx One vs HCL AppScan Logo
Checkmarx One vs HCL AppScan
Compared 7% of the time
More HCL AppScan Competitors
No data available
 

Product Reports

Buyer's Guide
HCL AppScan
July 2025
HCL AppScan reportDownload HCL AppScan product report
Buyer's Guide
Application Security Tools
June 2025
Trustwave App Scanner [EOL] reportDownload Trustwave App Scanner [EOL] product report
 

Also Known As

IBM Security AppScan, Rational AppScan, AppScan
Hailstorm, Cenzic Hailstorm
 

Overview

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware
Provides ability to test applications for security vulnerabilities, security policies and regulatory compliance.
Trustwave
 

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Leading Health Insurer
Buyer's Guide
Application Security Tools
June 2025
Download Free Report
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: June 2025.
DOWNLOAD NOW
861,524 professionals have used our research since 2012.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.