HCL AppScan vs ReversingLabs comparison

Read 4 ReversingLabs reviews

6,115 Views
1,529 Comparison Views

100% willing to recommend

HCL AppScan

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 3, 2026

HCL AppScan and ReversingLabs compete in the cybersecurity product category, specifically in application security and threat intelligence. Based on data comparisons, ReversingLabs appears to have the upper hand due to its advanced threat analysis features, despite potentially higher costs.

Features: HCL AppScan is equipped with static, dynamic, and interactive testing capabilities. It provides diverse testing methodologies and integrates well with various development processes. ReversingLabs offers detailed threat intelligence, focusing on malware detection and advanced analysis, making it highly effective in threat identification.

Room for Improvement: HCL AppScan could improve by reducing setup time and enhancing on-premise integration options. Additionally, it might benefit from advanced reporting features. ReversingLabs could improve documentation and user interface for better user experience and simplify pricing models for clearer upfront cost understanding.

Ease of Deployment and Customer Service: ReversingLabs provides a flexible deployment model and supportive customer service, facilitating easier integration into existing frameworks. HCL AppScan may require more setup time but offers strong customer support to assist in deployment.

Pricing and ROI: HCL AppScan offers a cost-effective setup with competitive ROI, delivering valuable returns through comprehensive security testing. ReversingLabs, despite higher initial costs, is viewed as worth the investment due to its thorough threat analysis and potential long-term savings from preventing security breaches.

To learn more, read our detailed HCL AppScan vs. ReversingLabs Report (Updated: September 2026).

HCL AppScan vs. ReversingLabs

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

HCL AppScan

Ranking in Application Security Tools

23rd

Average Rating

7.6

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (19th), Dynamic Application Security Testing (DAST) (7th)

ReversingLabs

Ranking in Application Security Tools

42nd

Average Rating

9.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Anti-Malware Tools (42nd), Container Security (50th), Software Composition Analysis (SCA) (24th), Threat Intelligence Platforms (TIP) (27th), Software Supply Chain Security (19th)

Mindshare comparison

As of October 2026, in the Application Security Tools category, the mindshare of HCL AppScan is 2.3%, down from 2.5% compared to the previous year. The mindshare of ReversingLabs is 0.9%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
HCL AppScan	2.3%
ReversingLabs	0.9%
Other	96.8%

Application Security Tools

Featured Reviews

Ravi Khanchandani

Founder Director at Techsa Services

Has improved identification of encryption and authentication issues across cloud and on-prem applications

During the learning curve of onboarding HCL AppScan, we learned that HCL has altered the portfolio and now offers HCL AppScan 360, which has a much better look and feel with an improved user interface. However, there is one feature called SCA, which stands for Software Composition Analysis, that could be improved. When I'm doing an application scan, HCL AppScan has the ability to generate information about what components are in use. For example, if I'm scanning a web application, it shows me the various components being used. It tells me whether I have Java libraries, .NET frameworks, or other log management libraries such as Log4j, and what versions of those specific components are present. I would like to see more detailed reports from the tool. Currently, you can find out the components belonging to a specific software, but if detailed reporting became available, you would be in a better position to identify vulnerabilities. For instance, I could identify that I had the Log4j vulnerability and know that I need to fix my application accordingly. If they add the features I'm describing, I would consider giving them a higher rating. However, I've only been experienced with the product for three months.

Read full review

Tim Craig

Forensic Lead, Global Security Fusion Center at a insurance company with 10,001+ employees

Very good malware and goodware repository and enables us to look more deeply at indicators of compromise

The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild. Also, the solution’s object and file analysis provide us with actionable insights. Its malware and goodware repository is very good. It's very robust. It gets all of the different repositories that are out there that do analysis and brings them under one roof where we can statically analyze for those indicators of compromise and look at them more deeply. If we need to go deeper into things, we can do that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase."

"Compared to other tools only AppScan supports special language."

"I mainly use AppScan for vulnerability scanning and database bridging."

"The dynamic scan, the DAST tool, dynamic applications scanning and testing tool, is great."

"The solution offers services in a few specific development languages."

"For its first initial release, the integration was pretty good."

"AppScan seems to be very good at detecting reflected XSS vulnerabilities."

"There's extensive functionality with custom rules and a custom knowledge base."

More HCL AppScan pros

"It offers reports on a great many more file types than the other analysis solutions we have. It can give us a more in-depth analysis and better reporting on a larger number of file types. It also gives us a more comprehensive score on a number of things as well, and that's why we're using it as a front-end filter. It gives us more information... It's valuable because of its depth of information, as well as the breadth it gives us. There aren't a lot of tools that cover all of the different file types."

"The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild."

"As far as the availability of the content is generally concerned and the number of malicious programs that can be looked up in the repository, these are very extensive."

"As far as static analysis information is concerned, we use most of the information that is available in order to determine whether or not we might be dealing with a malware variant. This includes information that is related to Java rules. This is also related to malware families indicated or specific malicious software variants that are labeled by name."

"ReversingLabs has a large sample size."

"We have complete faith that it can do that for us, and can do it at scale."

"As far as the malware repository is concerned, it's extensive. It's a good source for finding samples, where we are unable to find them on other channels or by leveraging other sources."

"We had nothing in the environment to do such analysis, so it's been a savior in many ways."

Cons

"There is one feature called SCA, which stands for Software Composition Analysis, that could be improved."

"They should have a better UI for dashboards."

"We would like to see a check in the specific vulnerabilities in mobile applications or rooted devices, such as jailbreaking devices."

"It's a little bit basic when you talk about the Web Services. If AppScan improved its maturity on Web Services testing, that would be good."

"This product lacks in many areas, and so we are looking at other options."

"They could incorporate AI to enhance vulnerability detection and improve the product's reporting capabilities."

"Currently, we are satisfied with AppScan but I am sure there are better alternatives available because this is a very old product."

"The solution's scalability can be a matter of concern because one license runs on one machine only."

More HCL AppScan cons

"We would really like further integration with our threat intelligence platform, which is called ThreatConnect. We would also really like further integrations with an endpoint protection product we use called Tanium. The reason I mentioned both of these is that ReversingLabs claims to have extensive integrations with both of them, but they did not work for us."

"I would like to see if we could do a little bit more of bulk uploading of hash sets. Right now, I can only do them individually."

"The product support could be better at times. Sometimes, the resources that they provide could be of higher quality."

"The solution needs to improve integrations."

"While the company is very helpful, it would be very much appreciated to have extensive proof of concept scripts for the different APIs available, though not for all the APIs that we have purchased. Respective scripts are available, but those scripts which are available are typically not of very high quality."

Pricing and Cost Advice

"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."

"The product has premium pricing and could be more competitive."

"Our clients are willing to pay the extra money. It is expensive."

"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."

"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."

"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."

"The solution is moderately priced."

"I would rate the product's pricing a nine out of ten. The product's pricing is expensive compared to the features that they offer."

More HCL AppScan pricing and cost advice

"Currently, the license number of lookups that we purchased has not been reached yet, because the integration has only recently been completed. However, our usage is expected and planned to increase over the next couple of months."

"We have a yearly contract based on the number of queries and malicious programs which can be processed."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

10%

Financial Services Firm

10%

Outsourcing Company

Construction Company

16%

Financial Services Firm

11%

Comms Service Provider

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	31

No data available

Questions from the Community

What needs improvement with HCL AppScan?

See all answers

What is your primary use case for HCL AppScan?

I'm currently working with BigFix and HCL AppScan. At least three people in my company are using HCL AppScan. Since we are a reseller, we run it in both lab environments and live production applica...

See all answers

What is your experience regarding pricing and costs for HCL AppScan?

AppScan is considered more cost-effective than Veracode, although I have not updated the exact pricing details. Companies often choose based on budget constraints, with Veracode being on the higher...

See all answers

Ask a question

Earn 20 points

Comparisons

Veracode vs HCL AppScan

Compared 7% of the time

Checkmarx One vs HCL AppScan

Compared 7% of the time

PortSwigger Burp Suite Professional vs HCL AppScan

Compared 5% of the time

SonarQube vs HCL AppScan

Compared 5% of the time

OpenText Core Application Security vs HCL AppScan

Compared 5% of the time

More HCL AppScan Competitors

JFrog Xray vs ReversingLabs

Compared 7% of the time

MetaDefender vs ReversingLabs

Compared 7% of the time

VirusTotal vs ReversingLabs

Compared 6% of the time

Black Duck SCA vs ReversingLabs

Compared 5% of the time

Wiz vs ReversingLabs

Compared 4% of the time

More ReversingLabs Competitors

Product Reports

HCL AppScan

Download HCL AppScan product report

Download ReversingLabs product report

Also Known As

IBM Security AppScan, Rational AppScan, AppScan

ReversingLabs Titanium, ReversingLabs secure.software

Overview

HCL AppScan offers quick vulnerability detection with effective SDLC integration and is known for its user-friendly interface and seamless security integration.

HCL AppScan provides dynamic and static scanning to identify vulnerabilities like XSS and SQL injection. It integrates well into CI/CD pipelines, supports multiple languages, and offers web and dynamic scanning, helping businesses ensure security across development lifecycles. Users benefit from API coverage, Postman integration, and its ability to function in cloud and on-premise environments, facilitating a shift from DevOps to DevSecOps practices.

What features define HCL AppScan?

User-friendly interface: Simplifies navigation and usage.
Vulnerability detection: Quickly identifies issues like XSS and SQL injection.
Integration with SDLC: Seamlessly blends with development processes.
Dynamic scanning: Offers comprehensive security evaluations.
Multiple language support: Supports diverse programming environments.

What benefits should users consider?

Scalability: Adapts to growing needs and projects.
Low false-positive rates: Delivers accurate and reliable results.
Detailed reporting: Provides comprehensive vulnerability insights.
Effective integration: Enhances CI/CD pipeline security.

HCL AppScan is leveraged in sectors requiring rigorous security checks, such as finance and healthcare, where it conducts comprehensive scans and offers insights into potential vulnerabilities. Its robust scanning capabilities aid companies in maintaining compliance and security standards.

HCLSoftware

ReversingLabs delivers a cutting-edge solution for cybersecurity experts, specializing in advanced threat detection and response. It is trusted by industries focused on maintaining high security standards with its innovative use of technology.

ReversingLabs provides comprehensive support for identifying and mitigating threats using a robust intelligence platform. Its unique approach integrates threat detection with automated analysis tools, enhancing organizations' security frameworks. The transparency and depth in tracking files and binaries ensure that users have a clear understanding of potential issues in software and files. With an emphasis on speed and accuracy, it ensures threats are managed before they escalate.

What are the key features of ReversingLabs?

Threat Intelligence Platform: Integrates detailed malware analysis for proactive security measures.
Automated Analysis Tools: Speeds up threat detection and provides in-depth insights.
Comprehensive Data Management: Simplifies complex datasets for enhanced threat recognition.
Open Integration: Smoothly integrates with existing security infrastructures.

What benefits or ROI can users find in ReversingLabs?

Enhanced Security Capabilities: Strengthens defenses against emerging threats before damage occurs.
Efficiency in Detection: Reduces response time through rapid analysis and identification.
Cost Reduction: Minimizes resource allocation by automating the threat management process.
Scalability: Easily expands with growing security needs without added complexity.

ReversingLabs is widely implemented in industries such as finance and healthcare, where data protection is critical. Financial institutions utilize its threat detection to safeguard against data breaches, while healthcare providers rely on it to maintain patient confidentiality and protect sensitive information from cyber threats.

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

Financial services, healthcare, government, manufacturing, oil & gas, telecommunications, information technology

HCL AppScan vs. ReversingLabs