HCL AppScan

HCL AppScan is an automated and integrated platform that provides a holistic visibility into the security posture of an application. It enables protection of business-critical applications from security threats, vulnerabilities, and compliance violations. It offers best protection in the market right now. HCL AppScan enables our organizations to secure our mobile and web apps by identifying vulnerabilities and flaws before they are deployed into production environment.

• Easy to configure
• Stable solution
• Easy to set up
• Scanning QR codes

• Supports SAST, DAST, IAST and risk-management capabilities
• Multiple Code Languages Supported
• Fast and Accurate Application Security Testing

Veracode

HubSpot Marketing Hub, Evernote, Notion

For years I have compared it with products from other companies and free products, but to be honest, the test patterns have become commoditized and I don't think there is a big difference in any product. In addition, the report can be shared with development members, leading to problem-solving.

• It is beneficial in my opinion since there are answers and recommendations for the difficulties.
• The advantage of AppScan is that it can diagnose according to application specifications.
• Dynamic diagnostics is basically a test that guarantees quality by the number of test cases.

• There are countless implementations to accomplish the same thing, and so many configurations are required.
• Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen.
• Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan.

Teamwork, TeamViewer Meeting, SonicWall SonicWave Series

• provides enterprise dashboards to classify and prioritize application assets based on business impact to maximize remediation efforts
• learns behavior of each application to test application-specific vulnerabilities

Veracode

This application helps to perform Dynamic Application Scan, in which the HCL AppScan dynamically navigates through the site and finds any vulnerabilities or fixes that can be done to prevent any future attack. The best thing about this application is the variety of configurations we can do depending on the scenario and the ping capacity.

• Automate the scan
• Instant and detailed report
• The configurations in the application

• The time takes to execute the scan.
• Sometime it pings the DB much frequently that it may come down.
• It does not sends any notification referring that the scan is completed.

Veracode

• The positive impact is that it gives us a way to identify and remediate vulnerabilities in our web applications prior to being placed in production

Rapid7 AppSpider, Veracode and Qualysguard Web Application Scanning

Rapid7 Nexpose, LogRhythm