I prefer Appscan, as it much more user friendly, and it detects cross-site scripting and SQL injection issues much better than other tools in the market.
HCL AppScan offers compliance templates, accurate vulnerability identification with severity levels, and supports static, dynamic, and QR code scanning. It integrates with SDLC, aiding developers with AI-powered remediation steps. However, it faces challenges like integration limitations, slow scans on large websites, false positives, and scalability issues. Performance enhancement for web application scanning is needed, along with improved CI/CD integration, security, reporting features, and better vulnerability detection through AI.
