Welcome
Welcome to the documentation for HCL® AppScan® Source.
Introduction to HCL® AppScan® Source
HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop.
What's New in AppScan® Source
Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
Installing
Learn how to install the product.
- System requirements and installation prerequisites
  - Windows system requirements
    Basic Windows system requirements are listed here. For detailed requirements, contact HCL Support.
  - Linux system requirements
    Basic Linux system requirements are listed here. For detailed requirements, contact HCL support.
  - AppScan® Source framework support
    This topic lists the languages that can be scanned in AppScan® Source.
  - AppScan® Source for Analysis and AppScan® Source for Development (Eclipse plug-in) component prerequisite on Linux™
    On Linux™, Eclipse requires the installation of a third-party component in order to render browser-based content. Without this component, AppScan® Source for Analysis and the AppScan Source for Development Eclipse plug-in may exhibit symptoms such as a hang after login or a fail during product use.
  - Interoprability of AppScan® Source and AppScan® Enterprise
  - Plug-ins and integrations for AppScan® Source
  - System requirements terms
    Terms used in system requirements tables.
- Sample installation scenarios
  When installing AppScan® Source, it is important to follow the correct installation workflow. These topics guide you through the workflow involved in some sample installation scenarios.
- Upgrading AppScan® Source
- Advanced installation and activation topics
  This section describes advanced installation options and activation procedures.
- AppScan® Source silent installers
  The AppScan® Source custom installation wizard is used for creating silent installers.
- Activating the software
- Removing AppScan® Source from your system
  You can remove AppScan® Source from the Windows™ Control Panel or with a Linux™ uninstall script. The AppScan Source uninstall does not remove or back up an installed Oracle database. Deleting the AppScan Source user from an Oracle instance is a manual database administrative task.
Configuring
Learn how to configure the product.
Administering
Learn how to administer the product.
Developing
Learn how to develop by using the product.
Extending product function
Learn how to extend the product.
Reference
Review reference information for the product.
Troubleshooting and support
There are a number of self-help information resources and tools to help you troubleshoot problems.

AppScan® Source framework support

This topic lists the languages that can be scanned in AppScan® Source.

Framework for Frameworks handling APIs: built-in framework support

AppScan® Source includes built-in support for these frameworks:

Android Java
AngularJS
Apache Struts 1 and 2
ASP .NET MVC 3, 4, and 5 (Windows™ only)
ASP .NET (Windows™ only)
Django
Enterprise JavaBeans™ (EJB) 2
Ionic
J2EE
JavaServer Faces (JSF) 2
Jax - RS (V1.0 and V1.1)
Jax - WS (V2.2)
.NET 4.5 (Windows™ only)
Node.js
Objective C
React Native
SAP ABAP
Spring MVC 2.5, 3, and 4
Vue.js
Xamarin