:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

An open source application scanning tool

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

Integrate static security testing with HCL AppScan CodeSweep with Github.

Gradle plugin for integrating with HCL AppScan Source

A framework for interacting with HCL AppScan on Cloud and HCL AppScan Enterprise

Maven plugin for integrating with HCL AppScan Source

Integrate static security testing with HCL AppScan on Cloud using GitHub Actions

A service to help synchronize issues between HCL AppScan and other Issue Management systems

Maven plugin for integrating with HCL AppScan on Cloud

A sample application that can used to demonstrate the method-level annotation support in HCL AppScan static analysis

PyScan is an extension that lets you control AppScan through Python.

Scanning multiple URLs with AppScan Standard by reading URL in text file and excute scan in sequence.

An extension which allows the user to import a Burp file containing a list of requests into AppScan

An extension which enables to import into AppScan a text file containing a list of URLs.

Plugin for integrating HCL AppScan on Cloud (ASoC) scanning into GoCD pipelines

This is a linux docker image that uses python to download the SAClientUtil from HCL AppScan on Cloud and run static analysis against a build application in Bitbucket pipelines.

Batch Manage your ASoC to Invite, Delete users and scans

A GitHub Action for running DAST scans in AppScan on Cloud

HCL AppScan IFA Server Java client tool