Try our new research platform with insights from 80,000+ expert users

HCL AppScan vs Trustwave App Scanner [EOL] comparison

HCLSoftware and Trustwave are both solutions in the Application Security Tools category. Additionally, 84% of HCLSoftware users are willing to recommend the solution, compared to 66% of Trustwave users who would recommend it.
HCL AppScan
Read 43 HCL AppScan reviews
  • 4,377 Views
  • 3,108 Comparison Views
84% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between HCL AppScan and Trustwave App Scanner [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Application Security Tools Report (Updated: September 2025).
Buyer's Guide
Application Security Tools
September 2025
Download the complete report
Helped 869,089 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HCL AppScan
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
43
Ranking in other categories
Application Security Tools (15th), Static Application Security Testing (SAST) (14th), Dynamic Application Security Testing (DAST) (1st)
Trustwave App Scanner [EOL]
Average Rating
7.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Gladwin Christian - PeerSpot reviewer
A useful tool to scan applications that can be easily installed
Given that we have been using HCL AppScan for many years, I think the setup process is not difficult at all. Sometimes, some issues stop or prevent my company from moving forward with the product's setup phase. We have to call HCL's support team and engage in long discussions to smoothly carry out the setup phase. In general, the product's setup phase is not difficult in our company. The solution is deployed on an on-premises model. The licenses for the solution are available only on cloud deployments nowadays. The solution is already installed in our environment. Every time a new release or software comes out from HCL, our company does a scan, which takes maybe a day or two.
Read full review
Securityd276 - PeerSpot reviewer
Stable solution that has increased the maturity of our security program
I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities. For the most part, it fits our needs but a little more flexibility would be great. I would also like to have more information on AI. If we start to deploy AI in our infrastructure, does it cover that as well?
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It highlights, with several grades of severity, the types of vulnerabilities, so we can focus on the most severe security vulnerabilities in the code."
"You can easily find particular features and functions through the UI."
"We use it as a security testing application."
"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."
"AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further."
"We leverage it as a quality check against code."
"We are now deploying less defects to production."
"It provides a better integration for our ecosystem."
More HCL AppScan pros
"The stability is great. We haven't had any issues at all with it."
 

Cons

"One thing which I think can be improved is the CI/CD Integration"
"They have to improve support."
"It's a little bit basic when you talk about the Web Services. If AppScan improved its maturity on Web Services testing, that would be good."
"The solution could improve by having a mobile version."
"I think being able to search across more containers, especially some of the docker elements. We need a little tighter integration there. That's the only thing I can see at this point."
"The solution often has a high number of false positives. It's an aspect they really need to improve upon."
"Scans become slow on large websites."
"AppScan needs to improve its handling of false positives."
More HCL AppScan cons
"I would like to see a little more flexibility with regards to setting up profiles for vulnerabilities."
 

Pricing and Cost Advice

"The tool was expensive."
"HCL AppScan is expensive."
"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."
"I would rate the product's pricing a nine out of ten. The product's pricing is expensive compared to the features that they offer."
"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."
"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."
"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."
"The product has premium pricing and could be more competitive."
More HCL AppScan pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
869,089 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
12%
Government
10%
Manufacturing Company
10%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise6
Large Enterprise31
No data available
 

Questions from the Community

What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
See all answers
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
See all answers
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
See all answers
Ask a question
Earn 20 points
 

Comparisons

SonarQube Server (formerly SonarQube) vs HCL AppScan Logo
SonarQube Server (formerly SonarQube) vs HCL AppScan
Compared 12% of the time
Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
Compared 12% of the time
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Compared 11% of the time
OWASP Zap vs HCL AppScan Logo
OWASP Zap vs HCL AppScan
Compared 8% of the time
PortSwigger Burp Suite Professional vs HCL AppScan Logo
PortSwigger Burp Suite Professional vs HCL AppScan
Compared 7% of the time
More HCL AppScan Competitors
No data available
 

Product Reports

Buyer's Guide
HCL AppScan
September 2025
HCL AppScan reportDownload HCL AppScan product report
Buyer's Guide
Application Security Tools
September 2025
Trustwave App Scanner [EOL] reportDownload Trustwave App Scanner [EOL] product report
 

Also Known As

IBM Security AppScan, Rational AppScan, AppScan
Hailstorm, Cenzic Hailstorm
 

Overview

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware
Provides ability to test applications for security vulnerabilities, security policies and regulatory compliance.
Trustwave
 

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Leading Health Insurer
Buyer's Guide
Application Security Tools
September 2025
Download Free Report
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: September 2025.
DOWNLOAD NOW
869,089 professionals have used our research since 2012.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.