As the dynamic testing component of the HCL AppScan product family, AppScan Standard 10.10.0 performs security testing against running web applications and APIs using techniques that simulate external attacker behavior. It combines automated exploration, manual exploration, browser execution, and multi-step operations to improve coverage for applications with complex workflows. The product also provides detailed findings, test requests and responses, and compliance reporting. Version 10.10.0 extends testing to LLM applications, including prompt injection and sensitive information disclosure, while also improving JavaScript custom script editing, multi-step workflow diagnostics, automatic login, AngularJS SPA support, and several compliance reports. One of its main advantages is that security testers can use automated scanning for general coverage while supplementing it with manual exploration and recorded workflows for areas that are difficult to reach automatically.
AppScan Standard 10.10.0 provides DAST capabilities for assessing the behavior of web applications and APIs while they are running. The testing process includes application exploration, session and authentication handling, attack execution, result analysis, and reporting, with support for both automated and manually guided workflows. In version 10.10.0, HCL expands the product to include security testing for LLM-based application functionality and adds checks for risks such as prompt injection and data disclosure. The release also refines multi-step operations, automatic login, JavaScript-related scanning, AngularJS SPA support, information masking, and compliance reports. A key advantage is that teams can apply the same testing environment to standard web applications, complex authenticated workflows, and applications that incorporate LLM services.
AppScan Standard 10.10.0 provides black-box dynamic testing for web applications and APIs, including application discovery, browser interaction, session handling, attack testing, and result analysis. It can also use manually recorded actions to cover workflows that automated crawling may not fully reach. Version 10.10.0 introduces LLM-oriented DAST functionality and adds tests for risks associated with prompt handling and data disclosure. Other changes affect multi-step operations, login automation, AngularJS applications, script editing, compliance reports, and masking of sensitive values. The release broadens AppScan's testing scope while retaining its existing workflow for conventional web and API assessments.
AppScan Standard 10.10.0 evaluates web and API security through browser-based exploration and dynamic attack testing. It can work with JavaScript-driven interfaces, authenticated sessions, forms, APIs, and user workflows that require several sequential actions. The 10.10.0 release introduces support for testing certain LLM-related risks, including prompt injection and sensitive information leakage, while also revising several existing functions. Multi-step actions are easier to review, automatic login behavior has been improved, AngularJS SPA scanning has been adjusted, and compliance reporting has been updated. The product is therefore suited to organizations that need a single DAST process for standard web applications, complex workflows, and selected AI-enabled application features.
HCL AppScan 10.10.0 focuses more on āwhether the application itself is secure.ā It covers multiple security layers, from source code and running applications to third-party components. By leveraging various application security testing technologies, it helps organizations discover, assess, and remediate vulnerabilities throughout the software development lifecycle, reducing the risk of security issues reaching production environments.
HCL AppScan 10.10.0 focuses on application security throughout the software development lifecycle. Unlike tools primarily focused on a single testing stage, it combines multiple application security testing technologies to help organizations discover, assess, prioritize, and remediate vulnerabilities from development through production.
HCL AppScan 10.10.0 differentiates itself through its broad coverage of application security testing across the SDLC. It brings together multiple testing methodologies to address security risks in source code, web applications, APIs, and third-party components, supporting security assessment from development through delivery.
AppScan Standard 10.10.0 combines browser-driven application exploration with active vulnerability testing for web applications and APIs. Version 10.10.0 broadens the testing scope to include selected security issues in LLM-based applications and makes changes to automatic login, multi-step operations, AngularJS SPA support, scripting, sensitive-information handling, and regulatory reporting.
AppScan Standard 10.10.0 combines automated application discovery with active attack testing to identify security issues in web applications and APIs. Manual exploration and multi-step actions can be used when specific areas require additional interaction. In this release, HCL adds DAST checks for LLM-related functionality while also updating authentication, AngularJS support, workflow diagnostics, script handling, sensitive-data protection, and compliance reports.
HCL AppScan Standard 10.10.0 introduces support for testing selected security issues in LLM-enabled applications and updates several existing DAST functions. Improvements include multi-step workflow handling, automatic login, AngularJS SPA scanning, custom script support, information masking, and compliance reporting. The product continues to support browser-based exploration and active testing of web applications and APIs.
|
