HCL AppScan on Cloud

by HCLSoftware

SaaS application security platform combining DAST, SAST, IAST, SCA and API testing.

Visit website

Application & API Security

Starting pricePer application, per concurrent user or per scan

Pricing modelsubscription

DeploymentSaaS (fully hosted and managed cloud)

Free trialYes

About

SaaS application security platform combining DAST, SAST, IAST, SCA and API testing.

HCL AppScan on Cloud is a fully hosted and managed, subscription-based application security platform for end-to-end testing and risk management. It combines dynamic, static and interactive analysis with software composition analysis and API testing.

AI-driven precision through Intelligent Finding Analytics and Intelligent Code Analytics reduces noise, while centralized dashboards, customizable policies and reporting with fix recommendations support compliance with PCI DSS, HIPAA and OWASP Top 10. It integrates with build environments, DevOps tools and IDEs, and can be bought per application, per concurrent user or per scan. A free trial is available.

Key features

Dynamic analysis (DAST); Static analysis (SAST); Interactive analysis (IAST); Software composition analysis; API testing and IaC; AI-driven finding and code analytics; Auto issue correlation; Regulatory compliance reporting

Product details

Vendor

HCLSoftware

Pricing

Per application, per concurrent user or per scanFree trial available

Pricing model: subscription

Visit website for full pricing details

Similar software

42Crunch

by 42Crunch

API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.

Contact for pricing

Aikido Security

by Aikido Security

Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.

Free; Basic $350/month

Akamai API Security

by Akamai Technologies

API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.

Contact for pricing

Barracuda WAF-as-a-Service

by Barracuda Networks

Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.

Contact for pricing

Black Duck Polaris

by Black Duck

Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.

Consumption-based pricing

Burp Suite Professional

by PortSwigger

Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.

Professional $499