No more typing reviews! Try our Samantha, our new voice AI agent.

GitLab Premium vs HCL AppScan comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab Premium
Ranking in Application Security Tools
23rd
Average Rating
8.2
Reviews Sentiment
5.4
Number of Reviews
5
Ranking in other categories
No ranking in other categories
HCL AppScan
Ranking in Application Security Tools
19th
Average Rating
7.6
Reviews Sentiment
5.9
Number of Reviews
44
Ranking in other categories
Static Application Security Testing (SAST) (17th), Dynamic Application Security Testing (DAST) (6th)
 

Featured Reviews

Bharadwaj Deepak Mohapatra - PeerSpot reviewer
DevOps Engineer at ENTERPRISE SYSTEM SOLUTIONS LIMITED
Have managed internal projects efficiently but face challenges with user interface and navigation
When discussing improvements for GitLab Premium, the main area is the GUI. GitHub's GUI is very good, offering many collaboration options and the ability to customize dashboards. GitHub's look and feel is superior, but GitLab Premium's dashboard is very simple. Regarding capabilities lacking in GitLab Premium, the main concern is the GUI. For example, in GitHub, there is a right side profile where settings can be directly accessed, and there is a direct section for developer mode with clear segregation. In GitLab Premium, when accessing users, confusion sometimes arises between root user and main user. There is an option for groups, but it is not direct. When clicking on groups, it goes to another section where groups must be found. This hierarchy could be more straightforward and direct. The biggest drawbacks of GitLab Premium are GUI and configuration. GUI is the primary concern, but other aspects are good.
Ravi Khanchandani - PeerSpot reviewer
Founder Director at Techsa Services
Has improved identification of encryption and authentication issues across cloud and on-prem applications
During the learning curve of onboarding HCL AppScan, we learned that HCL has altered the portfolio and now offers HCL AppScan 360, which has a much better look and feel with an improved user interface. However, there is one feature called SCA, which stands for Software Composition Analysis, that could be improved. When I'm doing an application scan, HCL AppScan has the ability to generate information about what components are in use. For example, if I'm scanning a web application, it shows me the various components being used. It tells me whether I have Java libraries, .NET frameworks, or other log management libraries such as Log4j, and what versions of those specific components are present. I would like to see more detailed reports from the tool. Currently, you can find out the components belonging to a specific software, but if detailed reporting became available, you would be in a better position to identify vulnerabilities. For instance, I could identify that I had the Log4j vulnerability and know that I need to fix my application accordingly. If they add the features I'm describing, I would consider giving them a higher rating. However, I've only been experienced with the product for three months.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The biggest benefit from GitLab Premium is that both repository management systems are good, as both GitHub and GitLab are valuable, and the main advantage is that GitLab Premium has community support, making it good in all aspects for small organizations."
"The main benefits I received from GitLab Premium are that I save money and streamline my management process of applications."
"GitLab Premium is much more reliable, quicker, faster, and basically easier to operate compared to GitHub."
"The main benefits from advanced CI/CD capabilities in GitLab Premium include automation to pull and merge the codes together, and it's all done automatically."
"I would give a rating of eleven in that case, because we never had a downtime with GitLab Premium."
"The main benefits from advanced CI/CD capabilities in GitLab Premium include automation to pull and merge the codes together, and it's all done automatically."
"The most valuable feature is that it achieves a very low false-positive detection rate."
"The platform has valuable security features, helping us identify sensitive code issues and the possibility of internal applications' exposure to external threats."
"The solution is cheap."
"For its first initial release, the integration was pretty good."
"This is a stable solution."
"The solution is easy to install. I would rate the product's setup between six to seven out of ten. The deployment time depends on the applications that need to be scanned. We have a development and operations team to take care of the product's maintenance."
"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."
"AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further."
 

Cons

"In terms of improvement for GitLab Premium, not necessarily GitLab Premium specifically but GitLab as a whole could enhance features on the project management side."
"The biggest drawbacks of GitLab Premium are GUI and configuration. GUI is the primary concern, but other aspects are good."
"It is complex. It takes a good amount of time."
"The automation part could be improved. Nowadays AI is being actively used, and if we could integrate something like ChatGPT with GitLab Premium, it would be easier for us to check logs and debug faster."
"The product has some technical limitations."
"They could incorporate AI to enhance vulnerability detection and improve the product's reporting capabilities."
"We would like to see a check in the specific vulnerabilities in mobile applications or rooted devices, such as jailbreaking devices."
"We have experienced challenges when trying to integrate this solution with other products; when you compare it with the other SecOps products, the quality of the output is too low and it is very outdated."
"The solution could improve by having a mobile version."
"Scans become slow on large websites."
"The tool should improve its output. Scanning is not a challenge anymore since there are many such tools available in the market. The product needs to focus on how its output is being used by end users. It should be also more user-friendly. One of the major challenges is in the tool's integration with applications that need to be scanned. Sometimes, the scanning is not proper."
"There is one feature called SCA, which stands for Software Composition Analysis, that could be improved."
 

Pricing and Cost Advice

Information not available
"The product has premium pricing and could be more competitive."
"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."
"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."
"The price is very expensive."
"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"The solution is moderately priced."
"Our clients are willing to pay the extra money. It is expensive."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
885,444 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
11%
Financial Services Firm
10%
Government
10%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise31
 

Questions from the Community

What needs improvement with GitLab Premium?
It could be better, but now that we have migrated to Siemens Energy, GitLab Premium is being actively looked after by another team. We are just making sure that GitLab Premium administration is bei...
What advice do you have for others considering GitLab Premium?
We were on the desktop, and now GitLab Premium is on cloud. I am not really sure about the purchase process for GitLab Premium. I am a GitLab Premium end-user. I give this product a rating of eight...
What is your experience regarding pricing and costs for GitLab Premium?
GitLab Premium is affordable in terms of pricing, while GitHub is a bit pricier. If working with a much more complex and vast organization at the enterprise level, GitHub would be the choice. If op...
What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
What needs improvement with HCL AppScan?
During the learning curve of onboarding HCL AppScan, we learned that HCL has altered the portfolio and now offers HCL AppScan 360, which has a much better look and feel with an improved user interf...
What is your primary use case for HCL AppScan?
I'm currently working with BigFix and HCL AppScan. At least three people in my company are using HCL AppScan. Since we are a reseller, we run it in both lab environments and live production applica...
 

Comparisons

No data available
 

Also Known As

No data available
IBM Security AppScan, Rational AppScan, AppScan
 

Overview

Information not available
 

Sample Customers

Information Not Available
Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Find out what your peers are saying about GitLab Premium vs. HCL AppScan and other solutions. Updated: March 2026.
885,444 professionals have used our research since 2012.