Welcome
Welcome to the documentation for HCL AppScan Standard version 10.4.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
- Presets
  Presets give you the main configuration views needed for a particular type of scan.
- Views
- Scan using a Postman Collection
  If you have a Postman Collection of requests to your web API, you can import it and use it as the basis for a scan.
- Scan file structure
  Explains the basic structure of an AppScan Standard SCAN file.
- Scan templates
  A scan template is simply a scan configuration that has been saved so that you can use it again.
- Changing the configuration during a scan
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

Configuration presets

Presets give you the main configuration views needed for a particular type of scan.

The presets at the top of Configuration view give you access to the most common configuration options, the main difference being the way the options are arranged.

Choose from:


Preset	Description
Web essentials	Configure Starting URL and domains, Login management, and Test policy and optimization, and start your scan.
API essentials	Configure API type and explore method (optionally add a Postman Collection file), Login management, and Test policy and optimization, and start your scan.
Full configuration	Gives you access to the full range of configuration options.

Additional methods for exploring web APIs

The following additional methods for exploring web APIs are also available:


Scan type	Description
Postman Collection	Import a Postman Collection to use as the basis for the Explore stage, and AppScan will verify and then run a Test stage for the scan.
Web API Wizard extension	This extension lets you scan using Open API description files (JSON and YAML). It is available from Tools > Extensions > Web API Wizard (Open API), and the extension is enabled by default.