ManageEngine Vulnerability Manager Plus From $57.92/mo · Free plan 9.1 Visit HCL AppScan Source
hcl-software.com
Spec sheet
- Purpose
- AppScan Source uses static application security testing to find vulnerabilities in source code early in the application lifecycle.Read 9 Oct 2026 · hcl-software.com
- Intended users
- HCL describes it for AppSec program managers, security analysts, and development teams.Read 9 Oct 2026 · hcl-software.com
- Support
- HCL provides product documentation and directs users to HCL Support for detailed system requirements.Read 9 Oct 2026 · help.hcl-software.com
- AI analysis
- Intelligent Finding Analytics and Intelligent Code Analytics expand code coverage, reduce false positives, and highlight critical issues.Read 9 Oct 2026 · hcl-software.com
- Build integration
- The documentation lists Ounce/Maven for continuous integration and delivery pipelines.Read 9 Oct 2026 · help.hcl-software.com
- Delivery options
- It can be used as a desktop application, an IDE plugin, or an automation tool.Read 9 Oct 2026 · hcl-software.com
- Deployment control
- HCL says scanning, storage, and analysis can be configured entirely within the customer’s own infrastructure.Read 9 Oct 2026 · hcl-software.com
- False positives
- HCL says Intelligent Finding Analytics can reduce false positives by up to 98%.Read 9 Oct 2026 · hcl-software.com
- IDE integrations
- Documented IDE integrations include Eclipse, JetBrains IDEs, Microsoft Visual Studio, and Visual Studio Code.Read 9 Oct 2026 · help.hcl-software.com
- Language coverage
- AppScan Source supports a broad range of programming languages and offers a bring-your-own-language capability.Read 9 Oct 2026 · hcl-software.com
- Notable platform limit
- As of AppScan Source 10.11.0, HCL says Windows 10 and Windows Server 2016 are no longer supported.Read 9 Oct 2026 · help.hcl-software.com
- Operating systems
- The installation wizard runs on Windows and Linux; the documentation says macOS and iOS Xcode project scanning have not been supported since version 9.0.3.11.Read 9 Oct 2026 · help.hcl-software.com
- Reporting
- HCL lists compliance reports for CWE Top 25, DISA Application Security and Development STIG, OWASP Top 10, OWASP Mobile 10, OWASP API 10, and PCI DSS.Read 9 Oct 2026 · hcl-software.com
- Secrets and IaC
- The product can identify and prioritize misconfigurations and secrets in Infrastructure as Code files.Read 9 Oct 2026 · hcl-software.com
Plans and prices
Per Authorized User Priced on request SAST license · tied to specific team members Read 9 Oct 2026 · hcl-software.com
Per Floating User Priced on request SAST license · shared among team members Read 9 Oct 2026 · hcl-software.com
Where Specifiction places it
- Vulnerability Scanner Software#15 of 297.4
- DevSecOps Platforms#14 of 257.3
- Dynamic Application Security Testing Software#16 of 267.3
- Web Application Security Scanners#18 of 297.3
- Application Security Testing#18 of 287.2
- Static Application Security Testing Software#20 of 257.3
- SAST Tools#21 of 267.2
