Welcome
Getting started
Welcome to the documentation for HCL AppScan 360°, where you can find information about how to install, maintain, and use this service.

Getting started
Welcome to the documentation for HCL AppScan 360°, where you can find information about how to install, maintain, and use this service.
- About HCL AppScan 360°
  HCL AppScan 360° is unified application security, visibility, and risk management. Versatile, scalable, and deployable anywhere.
- What's new in HCL AppScan 360°
  Explore new features that have been added to HCL AppScan 360°, and note any features and capabilities that have been deprecated in this release.
- Roles and workflows
  Learn about different AppScan 360° tasks and workflows for different AppScan 360° users.
- Sample apps and scripts
  Use these sample applications to practice scanning with AppScan 360°.
Installation
Learn about AppScan 360° architecture and how to install the product.
Navigation
This section describes the items on the main AppScan 360° menu bar, with links to more detailed information.
Administration
Define users, applications, policies, and configure DevOps integrations.
Dynamic analysis
HCL AppScan 360° performs security scans for web-applications for production, staging and development environments.
Interactive monitoring
Using an agent installed on your application, AppScan 360° identifies security vulnerabilities in your application during runtime by monitoring all interactions, both legitimate and malicious. The process is "passive," in the sense that IAST does not send its own tests, and can therefore run indefinitely.
Software Composition Analysis
Use Software Composition Analysis (SCA) to scan for security vulnerabilities in open source and third-party packages used by your code. SCA includes Intelligent Finding Analytics (IFA) and Intelligent Code Analytics (ICA).
Static analysis
Use static analysis (SAST) to scan for security vulnerabilities in web and desktop applications. Static analysis includes Intelligent Finding Analytics (IFA) and Intelligent Code Analytics (ICA).
Results
The Scans and Sessions page lists the scans under the categories DAST, SAST, SCA, and IAST, where you can view your scan results, including scan statistics. To view, rescan, or download reports, select a scan.The Scans and Sessions page lists scans under the categories where you can view your scan results, including scan statistics. To view, rescan, or download reports, select a scan.
Reference
Some frequently asked questions, and information about integrating AppScan 360° into the product lifecycle (SDLC).

Getting started

Welcome to the documentation for HCL AppScan 360°, where you can find information about how to install, maintain, and use this service.

Hover over the section headings in the menu bar above to see the contents of a section
Click HCL AppScan 360° Help on the left of the menu bar to access the full table of contents


Before you start Welcome What's new in HCL AppScan 360° Single VM installation of AppScan 360° Distributed installation of AppScan 360° Setting up the environment Preparing the configuration file	Technologies Dynamic analysis (DAST) Static analysis (SAST) About interactive monitoring (IAST) Software Composition Analysis (SCA)	Product resources HCL support forums HCL AppScan product ideas forum To get notified about AppScan 360° updates: Subscribe to AppScan News Learn more about AppScan 360°
Basic concepts Roles and workflows User management Creating an application inventory Scans and sessions Scanning for security vulnerabilities Policies	Working with results Results Triage Fix groups Remediation Reporting	Documentation resources Reference
Tools REST API Plugins and integrations	Additional functionality Measuring progress	Videos and tutorials Jenkins plugin tutorial Azure plugin tutorial Fix groups tutorial

Copyright HCL Limited 2000, 2025.