13 alternatives · from interactive application security testing software

Alternatives to HCL AppScan

HCL AppScan covers several stages of application security: it combines SAST, DAST, IAST, and SCA for source code, running applications, APIs, and open-source dependencies. Its API testing supports OpenAPI/Swagger, Postman, and GraphQL, and its AI-powered analysis is intended to help prioritize critical risks. Teams can connect it to common CI/CD tools, use compliance reports, and choose cloud or on-premises deployment. CodeSweep offers a narrower route for pull-request…

17.9

Aikido CSPM

Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.

Free planWebAPILinux

From $300 a month

Visit Details

26.8

Waratek IAST

Waratek IAST monitors Java applications during execution to find vulnerabilities in running code.

Free planWebLinuxSelf-hosted

From $2,499 a month

Visit Details

36.7

Acunetix

Acunetix, now Invicti Web + API, scans running web applications and APIs for exploitable vulnerabilities.

WebAPILinux

$500 one-time

Visit Details

4
DongTai IAST
DongTai IAST is an open-source interactive application security testing tool for analyzing application traffic and detecting vulnerabilities in Java…
Free planWebAPILinuxSelf-hosted
6.5Free plan
Visit
5
Contrast Assess
Contrast Assess is an Interactive Application Security Testing tool for identifying security risks in running applications.
WebAPILinuxmacOS
6.3
Visit
6
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted
6.3$500 one-time
Visit
7
New Relic IAST
New Relic IAST probes running application code to identify vulnerabilities that could be exploited, helping DevOps and security teams address risk…
Free planWeb
6.2Free plan
Visit
8
NowSecure Platform
NowSecure Platform gives organizations visibility into security, privacy, AI, compliance, and software supply-chain risks in mobile apps they build, use, or manage.
AndroidiOSWebAPI
6.0
Visit
9
Black Duck Polaris
Black Duck Polaris is a cloud-native application security testing platform that brings security analysis together across the software development life cycle.
WebAPI
5.8
Visit
10
Datadog Runtime Code Analysis (IAST)
Web
5.3From $20 a month
Visit
11
Black Duck Seeker
WebLinuxmacOSWindows
5.0
Visit
12
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web
4.9
Visit
13
OpenText Fortify on Demand
Web
4.8
Visit

Back to HCL AppScan