Welcome
Welcome to the documentation for HCL AppScan Standard version 10.4.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
- Overview
- What's new
  This section describes new AppScan Standard product features and enhancements in this release, as well as deprecations and anticipated changes, where relevant.
- System requirements
  A summary of the minimum hardware and software required for the machine that runs AppScan Standard.
- Installing
  The installation wizard guides you through the fast and simple process.
- License
  This section describes for the trial and paid versions of AppScan Standard.
- How an automatic scan works
  This topic explains the difference between the "stages" and "phases" of a scan.
- Web application vs. web API
  This topic explains the different methods available for exploring sites, before AppScan tests them.
- Basic workflow
  A diagram showing a simple AppScan workflow using the scan configuration wizard.
- Home screen
  Describes the options available from the home screen that opens when you load AppScan.
- Tour of the main screens
  Describes the components of the AppScan main screen (Issues view), and all menus and toolbars.
  - Navigation bar
    The navigation bar on the left side of the screen toggles you between the main steps used in a typical workflow. It can be collapsed to allow more space for data display.
  - Dashboard
    The dashboard shows a summary of the scan's configuration, status, data and results.
  - Application tree
  - Result list
  - Details pane
    This pane shows details of the item selected in the Result List.
  - Scan progress panel
  - Status bar
    The Status Bar at the bottom of the main window shows information for the scan that is currently running or loaded, and gives you access to the AppScan log and any notifications.
- Tutorial
  This simple tutorial goes through the steps of configuring a simple application scan using the Scan Configuration wizard, running the scan, and reviewing the results.
- Sample files
  The sample files can help give you a feel for using AppScan and what scan results look like.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

Application tree

The Application Tree is a tree-view display of the folders, URLs, and files that AppScan found on your application.

In Issues view the Application Tree counters (the numbers in parentheses next to each node of the tree) indicate the number of issues relevant to the node and all its child nodes. (The total number of issues is shown at the top of the Result list.)
A strikethrough on any item in the Application Tree indicates that the node and all its child nodes have been excluded from scans by the User. (To re-include such a node in future scans, right-click and select Include in Scan.)
Note: A child node can be included even if its parent node is excluded.
In the case of applications without a hierarchical URL structure, such as single entry-point applications (e.g. MVC), or applications where the hierarchical structure is not logical, you can create a "content-based" application tree, by defining a set of regular expressions which extract the logical path from the pages. (See Content-based view.)
If a URL in the application tree contains only error responses, the URL is displayed with strike through formatting (with a line through it).

Application Tree right-click menu

If you right-click an item (other than My Application) in the Application Tree, the context-sensitive menu offers some or all of the following options:


Menu Item	Function
Show in Browser	Opens the embedded browser to the selected URL.
Manual Explore	Starts a Manual Explore of the selected item. See Using a browser for details.
Manual Test	Opens the Manual Test dialog box. See Manual tests for details
Record Multi-Step Operation	Record a multi-step operation sequence for testing parts of the site that can only be reached by clicking links in a specific order. See Multi-step operations for details.
Copy URL	Copies the selected URL to the clipboard. (Where there are more than one sub-nodes the URL of the first sub-node is copied.)
Report for this node	Create a report for the currently selected node in the application tree (including all its child nodes). See Creating partial reports for details.
Exclude from Scan	Excludes the selected URL (or all URLs under the selected node) from scans. (Toggles with "Include in Scan") See Exclude URL from scan for details.