HCL AppScan

HCL AppScan is an AI application security testing platform spanning several distinct products under one family: AppScan Standard for dynamic application security testing (DAST) on web apps and APIs, AppScan Source for static application security testing (SAST) early in development, AppScan CodeSweep as a free, simple developer-focused SAST tool, AppScan Supply Chain Security for code-to-cloud posture management, and AppScan RapidFix, an agentic-AI triage tool that recommends trusted fixes to cut manual work and reduce security debt.

The DAST line specifically offers incremental scanning, test optimization, third-party component detection and web API scanning, while the SAST line emphasizes AI-driven accuracy, broad language coverage, secrets scanning and fix recommendations. An IAST capability monitors live applications for runtime vulnerability detection alongside the static and dynamic scan types. AppScan Code Defense Training rounds out the family by training developers on safe coding practices as they write code, rather than only after a scan finds a problem.

Pricing runs through a marketplace/credit-pack model rather than a flat subscription: CodeSweep is free, a single security scan runs $29.99, a scan pack covering a choice of DAST, SAST or SCA scans runs $299, and a 50-scan pack (the platform's best-value deal) runs $699. This pay-per-scan structure lets smaller teams buy exactly the scanning capacity they need rather than committing to an enterprise-wide license upfront.