What HCL AppScan is
HCL AppScan is a feature rich local DAST scanner, but the cloud offering and process for managing scans between teams leaves a lot to be desired. The vendor site is www.hcltechsw.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What HCL AppScan covers
HCL AppScan is in the catalog for these capabilities. Categories: DAST.
How to evaluate HCL AppScan in a security program
Use HCL AppScan as a stack candidate, not as diligence evidence. The oneNorma score for HCL AppScan is 2/10 (percentile 1). If the real gap is in DAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.hcltechsw.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
