HCL AppScan vs Upwind comparison

Why PeerSpot?

HCLSoftware and Upwind Security are both solutions in the Dynamic Application Security Testing (DAST) category. HCLSoftware is ranked #7 with an average rating of 7.0, while Upwind Security is ranked #11 with an average rating of 9.5. HCLSoftware holds a 8.7% mindshare in DAST, compared to Upwind Security’s 0.5% mindshare. Additionally, 84% of HCLSoftware users are willing to recommend the solution, compared to 100% of Upwind Security users who would recommend it.

HCL AppScan

Read 44 HCL AppScan reviews

9,023 Views
2,436 Comparison Views

84% willing to recommend

Upwind

Read 4 Upwind reviews

6,872 Views
69 Comparison Views

100% willing to recommend

HCL AppScan

Upwind

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between HCL AppScan and Upwind based on real PeerSpot user reviews.

Find out in this report how the two Dynamic Application Security Testing (DAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed HCL AppScan vs. Upwind Report (Updated: September 2026).

Buyer's Guide

HCL AppScan vs. Upwind

September 2026

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

HCL AppScan

Ranking in Dynamic Application Security Testing (DAST)

7th

Average Rating

7.6

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Application Security Tools (23rd), Static Application Security Testing (SAST) (19th)

Upwind

Ranking in Dynamic Application Security Testing (DAST)

11th

Average Rating

9.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Vulnerability Management (39th), Container Security (26th), Cloud Workload Protection Platforms (CWPP) (18th), API Security (11th), Cloud Security Posture Management (CSPM) (25th), Cloud-Native Application Protection Platforms (CNAPP) (15th), Attack Surface Management (ASM) (30th), Data Security Posture Management (DSPM) (18th), Cloud Infrastructure Entitlement Management (CIEM) (8th), Cloud Detection and Response (CDR) (7th), AI Security (11th)

Mindshare comparison

As of October 2026, in the Dynamic Application Security Testing (DAST) category, the mindshare of HCL AppScan is 8.7%, down from 11.3% compared to the previous year. The mindshare of Upwind is 0.5%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Mindshare Distribution
Product	Mindshare (%)
HCL AppScan	8.7%
Upwind	0.5%
Other	90.8%

Dynamic Application Security Testing (DAST)

Featured Reviews

Ravi Khanchandani

Founder Director at Techsa Services

Has improved identification of encryption and authentication issues across cloud and on-prem applications

During the learning curve of onboarding HCL AppScan, we learned that HCL has altered the portfolio and now offers HCL AppScan 360, which has a much better look and feel with an improved user interface. However, there is one feature called SCA, which stands for Software Composition Analysis, that could be improved. When I'm doing an application scan, HCL AppScan has the ability to generate information about what components are in use. For example, if I'm scanning a web application, it shows me the various components being used. It tells me whether I have Java libraries, .NET frameworks, or other log management libraries such as Log4j, and what versions of those specific components are present. I would like to see more detailed reports from the tool. Currently, you can find out the components belonging to a specific software, but if detailed reporting became available, you would be in a better position to identify vulnerabilities. For instance, I could identify that I had the Log4j vulnerability and know that I need to fix my application accordingly. If they add the features I'm describing, I would consider giving them a higher rating. However, I've only been experienced with the product for three months.

Read full review

Mohammed Mudasser

AI/ML Engineer at a educational organization with 501-1,000 employees

Runtime context has transformed how we prioritize exploitable cloud risks and protect workloads

I appreciate runtime context, which helps connect vulnerabilities and misconfigurations with actual workload behavior and network relationships, making it easier to prioritize remediation based on real exposure rather than simply working through a long list of security findings. The best features that stand out to me are contextual vulnerability prioritization, cloud workload visibility, and runtime security. I especially value how Upwind connects vulnerabilities with actual runtime behavior, which helps focus on exploitable risk rather than working through a long list of findings. It has helped us focus on actual exploitable risk instead of treating every vulnerability equally. By considering runtime activity, exposure, reachability, and sensitive data context, the team can prioritize remediation much faster and reduce unnecessary alert noise. I also value the runtime visibility and attack path context because it connects security findings with network behavior and actual workload. This makes investigations more actionable and helps the team move from simply detecting issues to understanding their real impact. The biggest positive impact has been the prioritization of cloud security risk and improved visibility. Instead of chasing every vulnerability, we can focus on issues that are actually exposed or active at runtime, which makes the security team more efficient and remediation more targeted.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We leverage it as a quality check against code."

"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."

"For its first initial release, the integration was pretty good."

"The HCL AppScan performance is both stable and reliable."

"The static scans are good, and the SaaS as well."

"With AppScan, we are now deploying less defects to production."

"The platform has valuable security features, helping us identify sensitive code issues and the possibility of internal applications' exposure to external threats."

"The HCL AppScan turnaround time for Burp Suite or any new feature request is pretty good, and that is why we are sticking with the HCL."

More HCL AppScan pros

"My advice for others looking into using Upwind is that if you are seeking a strong CNAPP with an advanced runtime and strong CDR capabilities, this is the product."

"Upwind has positively impacted my organization by reducing time to action and time to response by half."

"They are a great overall cloud security platform and they continue innovating and adding new features."

"The combination of runtime visibility, security insights, and contextual risk prioritization makes it much easier to focus on the risks that actually matter."

Cons

"IBM Security AppScan needs to add performance optimization for quickly scanning the target web applications."

"It has crashed at times."

"Visibility is an issue for us. Our partners were not even aware that we had an integration with AppSense."

"AppScan needs to improve its handling of false positives."

"Improving usability could enhance the overall experience with AppScan. It would be beneficial to make the solution more user-friendly, ensuring that everyone can easily navigate and utilize its features."

"Better detection of DOM-based XSS Better remediation guidance using code examples and contexts"

"Many silly false positives are produced."

"They should have a better UI for dashboards."

More HCL AppScan cons

"Upwind can be improved because its UI is a bit difficult to navigate."

Pricing and Cost Advice

"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."

"Our clients are willing to pay the extra money. It is expensive."

"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."

"I would rate the product's pricing a nine out of ten. The product's pricing is expensive compared to the features that they offer."

"The price is very expensive."

"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."

"The tool was expensive."

"The product has premium pricing and could be more competitive."

More HCL AppScan pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

10%

Financial Services Firm

10%

Outsourcing Company

Construction Company

Outsourcing Company

13%

Financial Services Firm

Comms Service Provider

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	6
Large Enterprise	31

No data available

Questions from the Community

What needs improvement with HCL AppScan?

See all answers

What is your primary use case for HCL AppScan?

I'm currently working with BigFix and HCL AppScan. At least three people in my company are using HCL AppScan. Since we are a reseller, we run it in both lab environments and live production applica...

See all answers

What is your experience regarding pricing and costs for HCL AppScan?

AppScan is considered more cost-effective than Veracode, although I have not updated the exact pricing details. Companies often choose based on budget constraints, with Veracode being on the higher...

See all answers

What is your experience regarding pricing and costs for Upwind?

The pricing, setup cost, and licensing process were pretty reasonable.

See all answers

What needs improvement with Upwind?

I would appreciate more customizable dashboards and reporting for different teams, such as security operations, engineering, and leadership. The runtime context is excellent, but tailoring those vi...

See all answers

What is your primary use case for Upwind?

My main use case for Upwind is cloud security and workload protection. I primarily use it to gain visibility into cloud assets, vulnerabilities, and runtime risks, and I mainly use it to prioritize...

See all answers

Comparisons

Veracode vs HCL AppScan

Compared 7% of the time

Checkmarx One vs HCL AppScan

Compared 7% of the time

PortSwigger Burp Suite Professional vs HCL AppScan

Compared 5% of the time

SonarQube vs HCL AppScan

Compared 5% of the time

OpenText Core Application Security vs HCL AppScan

Compared 5% of the time

More HCL AppScan Competitors

Wiz vs Upwind

Compared 18% of the time

Orca Security vs Upwind

Compared 12% of the time

Sweet Security vs Upwind

Compared 7% of the time

Salt Security vs Upwind

Compared 5% of the time

Sysdig Secure vs Upwind

Compared 4% of the time

More Upwind Competitors

Product Reports

Buyer's Guide

HCL AppScan

September 2026

Download HCL AppScan product report

Buyer's Guide

Upwind

September 2026

Download Upwind product report

Also Known As

IBM Security AppScan, Rational AppScan, AppScan

Upwind Security Upwind Platform for AWS Security Hub, Upwind Security Upwind for AWS Security Hub Extended

Overview

HCL AppScan offers quick vulnerability detection with effective SDLC integration and is known for its user-friendly interface and seamless security integration.

HCL AppScan provides dynamic and static scanning to identify vulnerabilities like XSS and SQL injection. It integrates well into CI/CD pipelines, supports multiple languages, and offers web and dynamic scanning, helping businesses ensure security across development lifecycles. Users benefit from API coverage, Postman integration, and its ability to function in cloud and on-premise environments, facilitating a shift from DevOps to DevSecOps practices.

What features define HCL AppScan?

User-friendly interface: Simplifies navigation and usage.
Vulnerability detection: Quickly identifies issues like XSS and SQL injection.
Integration with SDLC: Seamlessly blends with development processes.
Dynamic scanning: Offers comprehensive security evaluations.
Multiple language support: Supports diverse programming environments.

What benefits should users consider?

Scalability: Adapts to growing needs and projects.
Low false-positive rates: Delivers accurate and reliable results.
Detailed reporting: Provides comprehensive vulnerability insights.
Effective integration: Enhances CI/CD pipeline security.

HCL AppScan is leveraged in sectors requiring rigorous security checks, such as finance and healthcare, where it conducts comprehensive scans and offers insights into potential vulnerabilities. Its robust scanning capabilities aid companies in maintaining compliance and security standards.

HCLSoftware

Upwind is a comprehensive tool designed to optimize wind energy management for industry specialists. Streamlining processes and enhancing operational efficiency, it provides actionable insights and innovative features critical for achieving energy objectives.

The primary focus of Upwind is to provide a robust platform that fosters operational advancements in wind energy management. With its cutting-edge technology, Upwind is poised to deliver precise analytics and predictive maintenance capabilities. Its integration into existing infrastructures helps enhance the delivery of renewable energy, thereby facilitating a seamless transition towards more sustainable practices. Leveraging these capabilities, businesses can significantly augment their energy output while simultaneously reducing costs.

What are the most important features of Upwind?

Analytics Dashboard: Offers insightful data visualization for making informed decisions.
Predictive Maintenance: Proactively identifies potential issues to minimize downtime.
Real-time Monitoring: Ensures ongoing performance tracking for immediate action.
Scalability: Integrates easily with growing operations to enhance capability.

What benefits should users look for in reviews?

Reduced Costs: Efficiently manages resources to lower operational expenditure.
Increased Efficiency: Optimizes energy production strategies for better yield.
Improved Reliability: Consistent monitoring contributes to long-term operational stability.
Enhanced Insights: Provides critical data analytics to drive strategic decisions.

In the wind energy sector, implementing Upwind is directly aligned with industry goals of sustainability and economic growth. Whether integrated into large-scale wind farms or smaller localized projects, it adapts to diverse scenarios, ensuring alignment with industry-specific demands like regulatory compliance and technological advancements.

Upwind Security

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

StockX, Yotpo, bill, Digital Turbine, nanit, CallRail, boomi

Buyer's Guide

HCL AppScan vs. Upwind

September 2026

Free Report: HCL AppScan vs. Upwind

Find out what your peers are saying about HCL AppScan vs. Upwind and other solutions. Updated: September 2026.

DOWNLOAD NOW

915,341 professionals have used our research since 2012.

See our HCL AppScan vs. Upwind report.

See our list of best Dynamic Application Security Testing (DAST) vendors.

We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.