We performed a comparison between Acunetix and HCL AppScan based on real PeerSpot user reviews.
Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Acunetix is the best service in the world. It is easy to manage. It gives a lot of information to the users to see and identify problems in their site or applications. It works very well."
"We use the solution for the scanning of vulnerabilities like SQL injections."
"It comes equipped with an internal applicator, which automatically identifies and addresses vulnerabilities within the program."
"Their technical support has been very active. If I have an issue, I can reach out to them and get an answer pretty quick."
"Overall, it's a very good tool and a very good engine."
"Our developers can run the attacks directly from their environments, desktops."
"The scalability is good. The scalability is more than good because it can operate both as a standalone and it can be integrated as part of applications. So that really makes it a very, very versatile solution to have."
"One of the features that I feel is groundbreaking, that I would like to see expanded on, is the IAS feature: The Interactive Application Security Testing module that gets loaded onto an application on a server, for more in-depth, granular findings. I think that is really neat. I haven't seen a lot of competitors doing that."
"Technical support is helpful."
"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."
"The most valuable feature of the solution is Postman."
"It is easy it is to use. It is quick to find things, because of the code scanning tools. It's quite simple to use and it is very good the way it reports the findings."
"AppScan is stable."
"There's extensive functionality with custom rules and a custom knowledge base."
"We use it as a security testing application."
"The product has valuable features for static and dynamic testing."
"The only problem that they have is the price. It is a bit expensive, and you cannot change the number of applications for the whole year."
"You can't actually change your password after you've set it unless you go back into the administration account and you change it there. Thus, if you're locked out and don't remember your password, that's a thing."
"The vulnerability identification speed should be improved."
"Acunetix needs to improve its cost."
"The solution limits the number of scans. It would be much better if we could have unlimited scans."
"Acunetix needs to include agent analysis."
"We want to see how much bandwidth usage it consumes. When we monitor traffic we have issues with the consumption and throttling of the traffic."
"I had some issues with the JSON parameters where it found some strange vulnerabilities, but it didn't alert the person using it or me about these vulnerabilities, e.g., an error for SQL injection."
"One thing which I think can be improved is the CI/CD Integration"
"Many silly false positives are produced."
"IBM Security AppScan needs to add performance optimization for quickly scanning the target web applications."
"We would like to see a check in the specific vulnerabilities in mobile applications or rooted devices, such as jailbreaking devices."
"Visibility is an issue for us. Our partners do not know we have integrations with some of IBM products."
"The product has some technical limitations."
"The solution could improve by having a mobile version."
"I think being able to search across more containers, especially some of the docker elements. We need a little tighter integration there. That's the only thing I can see at this point."
Acunetix is ranked 17th in Application Security Tools with 26 reviews while HCL AppScan is ranked 15th in Application Security Tools with 41 reviews. Acunetix is rated 7.6, while HCL AppScan is rated 7.8. The top reviewer of Acunetix writes "Fantastic reporting features hindered by slow scanning ". On the other hand, the top reviewer of HCL AppScan writes " A stable and scalable product useful for application security scanning". Acunetix is most compared with OWASP Zap, Tenable.io Web Application Scanning, PortSwigger Burp Suite Professional, Fortify WebInspect and Veracode, whereas HCL AppScan is most compared with SonarQube, Veracode, PortSwigger Burp Suite Professional, OWASP Zap and Fortify on Demand. See our Acunetix vs. HCL AppScan report.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.