Try our new research platform with insights from 80,000+ expert users

HCL AppScan vs OpenText Dynamic Application Security Testing comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 21, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HCL AppScan
Ranking in Dynamic Application Security Testing (DAST)
3rd
Average Rating
7.6
Reviews Sentiment
5.9
Number of Reviews
43
Ranking in other categories
Application Security Tools (15th), Static Application Security Testing (SAST) (15th)
OpenText Dynamic Applicatio...
Ranking in Dynamic Application Security Testing (DAST)
4th
Average Rating
7.2
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
DevSecOps (9th)
 

Mindshare comparison

As of November 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of HCL AppScan is 11.5%, up from 11.6% compared to the previous year. The mindshare of OpenText Dynamic Application Security Testing is 11.3%, up from 9.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Dynamic Application Security Testing (DAST) Market Share Distribution
ProductMarket Share (%)
HCL AppScan11.5%
OpenText Dynamic Application Security Testing11.3%
Other77.2%
Dynamic Application Security Testing (DAST)
 

Featured Reviews

AnshulTomar - PeerSpot reviewer
Scalable platform with efficient static and dynamic testing features
We use the product for Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). By integrating AppScan into our CI/CD pipelines, aligned with Agile methodologies, we ensure that security testing becomes an integral part of the software development lifecycle The…
Navin N - PeerSpot reviewer
Effective scanning of diverse file extensions with fast reporting and issue resolution
We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this.  Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is cheap."
"We are now deploying less defects to production."
"This solution saves us time due to the low number of false positives detected."
"There's extensive functionality with custom rules and a custom knowledge base."
"It was easy to set up."
"AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further."
"It provides a better integration for our ecosystem."
"We leverage it as a quality check against code."
"The solution's technical support was very helpful."
"I've found the centralized dashboard the most valuable. For the management, it helps a lot to have abilities at the central level."
"It's a well-known platform for doing dynamic application scanning."
"The transaction recorder within WebInspect is easy to use, which is valuable for our team."
"The most valuable feature of this solution is the ability to make our customers more secure."
"Guided Scan option allows us to easily scan and share reports."
"The accuracy of its scans is great."
"I'm sorry, but there is no review content provided to extract a quote from."
 

Cons

"The tool should improve its output. Scanning is not a challenge anymore since there are many such tools available in the market. The product needs to focus on how its output is being used by end users. It should be also more user-friendly. One of the major challenges is in the tool's integration with applications that need to be scanned. Sometimes, the scanning is not proper."
"There is not a central management for static and dynamic."
"In future releases, I would like to see more aggressive reports. I would also like to see less false positives."
"They could add a software component analysis tool."
"We would like to integrate with some of the other reporting tools that we're planning to use in the future."
"I think being able to search across more containers, especially some of the docker elements. We need a little tighter integration there. That's the only thing I can see at this point."
"Improvement can be done as per customer requirements."
"AppScan is too complicated and should be made more user-friendly."
"The main area for improvement in Fortify WebInspect is the price, as it is too high compared to the market rate."
"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."
"Our biggest complaint about this product is that it freezes up, and literally doesn't work for us."
"The initial setup was complex."
"The scanner could be better."
"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."
"Creating reports is very slow and it is something that should be improved."
"Lately, we've seen more false negatives."
 

Pricing and Cost Advice

"I would rate the product's pricing a nine out of ten. The product's pricing is expensive compared to the features that they offer."
"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."
"The solution is moderately priced."
"The tool was expensive."
"Our clients are willing to pay the extra money. It is expensive."
"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."
"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"The pricing is not clear and while it is not high, it is difficult to understand."
"Fortify WebInspect is a very expensive product."
"This solution is very expensive."
"It’s a fair price for the solution."
"The price is okay."
"Our licensing is such that you can only run one scan at a time, which is inconvenient."
"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."
report
Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.
873,085 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
12%
Government
10%
Manufacturing Company
9%
Government
15%
Financial Services Firm
15%
Manufacturing Company
12%
Computer Software Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise15
 

Questions from the Community

What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
What is your experience regarding pricing and costs for Fortify WebInspect?
While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...
What needs improvement with Fortify WebInspect?
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...
What is your primary use case for Fortify WebInspect?
I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...
 

Also Known As

IBM Security AppScan, Rational AppScan, AppScan
Micro Focus WebInspect, WebInspect
 

Overview

 

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Aaron's
Find out what your peers are saying about HCL AppScan vs. OpenText Dynamic Application Security Testing and other solutions. Updated: September 2025.
873,085 professionals have used our research since 2012.