Appknox vs. HCL AppScan

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Appknox
Score 0.0 out of 10
N/A
Appknox is an on-demand mobile application security platform designed to help Developers, Security Researchers, and Enterprises to build a safe and secure mobile ecosystem using a system plus human approach to outsmart hackers. The vendor states they have been successful in reducing delivery timelines, manpower costs & mitigating security threats for Global Banks and Enterprises in 10 + countries. Appknox…N/A
HCL AppScan
Score 5.1 out of 10
N/A
AppScan (formerly Rational AppScan) is an application security testing solution acquired by HCL Technologies from IBM in late 2018. Appscan supports both dynamic (DAST) and static (SAST) application security testing.N/A
Pricing
AppknoxHCL AppScan
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
AppknoxHCL AppScan
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeOptionalNo setup fee
Additional Details
More Pricing Information
Community Pulse
AppknoxHCL AppScan
Best Alternatives
AppknoxHCL AppScan
Small Businesses
GitLab
GitLab
Score 8.7 out of 10
GitLab
GitLab
Score 8.7 out of 10
Medium-sized Companies
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
Enterprises
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
AppknoxHCL AppScan
Likelihood to Recommend
-
(0 ratings)
8.3
(6 ratings)
User Testimonials
AppknoxHCL AppScan
Likelihood to Recommend
Appknox
No answers on this topic
HCLSoftware
In HCL AppScan automation maintain a reasonable pace of review and remediation of flaws for our apps. HCL AppScan is a cloud-based enterprise mobile application security testing solution for Android and iOS applications developed using Java, .Net or Objective-C. So it covers all our area and It consists of three components: AppScan Source Edition for developing and testing apps internally, AppScan Standard Edition for testing internally or externally, and AppScan Enterprise Edition for large enterprises who need to secure their entire mobile application portfolio across the organization with multiple device types.
Read full review
Pros
Appknox
No answers on this topic
HCLSoftware
  • AppScan works well in finding application vulnerabilities such as SQL injection, cross-site scripting and all of the OWASP top 10.
  • Flexible reporting allows us to generate executive reports for application owners as well as separate technical reports for developers and system engineers.
  • Technical reports include remediation information and cross reference CVSS scores
  • Because it maintains data on all repeated assessments it helps us to do trending and metrics on compliance
Read full review
Cons
Appknox
No answers on this topic
HCLSoftware
  • It can have a FAQ session in the Application itself.
  • It can recommend the fix for the error that occurred during the scan.
  • Like its storing multiple manuals explore, It should have the capability of storing multiple logins.
Read full review
Alternatives Considered
Appknox
No answers on this topic
HCLSoftware
Both solutions are decent, however, I had team members who had the experience working with HCL AppScan. Also, the product was priced nominally which suited our budget. Further, HCL AppScan's user community was bigger and many learning resources were freely available which helped junior peers learn quickly and eliminate any issues
Read full review
Return on Investment
Appknox
No answers on this topic
HCLSoftware
  • There are countless implementations to accomplish the same thing, and so many configurations are required.
  • Even if you test it finished and find no vulnerabilities, there is no point if you just get the error screen.
  • Until now, I was worried about vulnerabilities and security in software development, but I think it was good to find the vulnerability problem quickly with HCL AppScan.
Read full review
ScreenShots

Appknox Screenshots

Screenshot of Appknox automated scanner is easy to use and has vast API compatibilities which make it simple to integrate into the mobile Application Development cycle, providing complete automation of SAST, DAST, and Application Program Interface(API) Testing.Screenshot of FileID: This is a unique serial number get auto-assigned by the dashboard and has multiple use cases such as compare feature & look for assistance. Namespace: The namespace or bundle ID are fetched from the binary itself, as based on the namespace the scanner curates different uploads and creates new projects. Platform: This is the second category based on which the scanner differentiates between two files having the same namespaces. The dashboard supports IOS, Android & Windows Application. Version & Version Code: These details are Auto-fetched from the binary and can be used for later for comparison & tracking uploads over time.Screenshot of Static Application Security Testing (SAST) can be considered as testing an application from the inside out by examining its source code or application binaries for issues based on the configuration which point towards a security vulnerability.Screenshot of A Dynamic Application Security Testing (DAST) analysis is generally specifically designed to detect conditions indicative of a security vulnerability in an application while in its running state.Screenshot of A Dynamic Application Security Testing (DAST) analysis is generally specifically designed to detect conditions indicative of a security vulnerability in an application while in its running state.Screenshot of If this function is enabled, the scanner will detect & capture all the API calls made & API End Points used during the dynamic scan session.

HCL AppScan Screenshots

Screenshot of Cloud Security: AppScan will scan Docker containers and container images to ensure that third party components have not introduced vulnerabilities to an application. Software composition analysis (SCA) tools help organizations inventory third-party commercial and open source components used within their software to understand which components and versions are being used and to identify security vulnerabilities affecting those components.Screenshot of API Testing: This dangerous attack vector can be secured by identifying vulnerable third-party components, automating and integrating API testing and detecting issues in the IDE.Screenshot of Auto Issue Correlation: AppScan leverages three technologies (DAST, SAST, IAST) to enrich results, validate fixes and reduce the number remediation tasks by grouping issues together.Screenshot of 30+ Code Languages Supported: HCL AppScan offers an extensive list of supported code languages.