--- title: "HCL AppScan" slug: "hcl-appscan" updated: 2025-03-26T17:57:16Z published: 2025-03-26T17:57:16Z canonical: "docs.databee.buzz/hcl-appscan" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # HCL AppScan HCL AppScan helps detect and fix security vulnerabilities in applications. It includes Dynamic Analysis (DAST) for testing live applications and APIs for vulnerabilities, and Static Analysis (SAST) for examining source code to find issues early in development. It also features Vulnerable Third-Party Component Detection to identify risks in third-party libraries. More information can be found at [HCL AppScan](https://help.hcl-software.com/appscan/ASoC/Welcome.html). **Integration Method**: API **Tables**: Vulnerability Finding (2002) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Scan | Retrieves the relative security of an application | This integration supports the following versions. | HCL AppScan API version | v4.0 | | --- | --- | > [!NOTE] > **Note:** > > HCL AppScan doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service. As for this document preparation, the latest release was on [**11th March 2025**](https://help.hcl-software.com/appscan/ASoC/appseccloud_whats_new_cm.html#whats_new_cm__section_t3d_24l_m2c:~:text=New%20on%20March%2005%2C%202025). ## Prerequisites - The user should have HCL AppScan with an account that has Administrator privilege. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate client credentials with the required scopes. 2. Add the [HCL AppScan data feed](/user-manual/docs/hcl-appscan#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **HCL AppScan Parameter** | | --- | --- | | API Base URL | Replace with your [organization instance](/docs/hcl-appscan#BaseURL) | | Token URL | Replace with your [organization instance](/docs/hcl-appscan#BaseURL) | | Secret Key | [Key Secret](/docs/hcl-appscan#KeyID_KeySecret) | | Key Id | [Key ID](/docs/hcl-appscan#KeyID_KeySecret) | ## HCL AppScan Configuration Before you start configuring the data feed on Databee UI, you will need to create the API Client and get the necessary information for API authentication such as Client ID and Client Secret. Follow these steps: ### Create client credentials 1. Login to the [**HCL AppScan**](https://cloud.appscan.com/main/myapps/empty) Platform. 2. From the left navigation bar, navigate to **Tools** > **API** and then click on the **Generate** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-072gq5k8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) > [!NOTE] > **Note**: > > If the token has already been generated and is lost, it needs to be regenerated by clicking the **Generate** button again. 3. Copy the **Key ID**, **Key Secret**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-xqr19hqf.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) > **Note:** > > You will not be able to view this again after you complete this step. Ensure that you copy it before closing the notification. ### Get Base URL 1. To obtain the base URL, navigate to the [API key](https://cloud.appscan.com/main/apikey) page in the AppScan on Cloud service: 1. North America data center: [https://cloud.appscan.com/main/apikey](https://cloud.appscan.com/main/apikey) 2. Western Europe data center: [https://eu.cloud.appscan.com/main/apikey](https://eu.cloud.appscan.com/main/apikey) 2. Copy the base URL from the **REST API** section as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-j94gf7hh.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-p416c457.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 2. Search for the **HCL AppScan** and click it as shown below**.** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-6p6capzc.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 3. Click on the **API Ingest** option for the collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-lroxdz4o.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-y5y87f7r.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) 5. In the configuration page, confirm the following: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/hcl-appscanmar2025-image-vx63jpxa.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A21Z&se=2026-10-30T12%3A33%3A21Z&sr=c&sp=r&sig=ajoz%2BN8ExjbKnmEUNypUwNi7%2FMbKkUPBUhOIutVMXNk%3D) - Authorization Method: TokenUrlAuth - API Base URL: replace [](/docs/hcl-appscan#BaseURL) with your organization instance. - Token URL: replace [](/docs/hcl-appscan#BaseURL) with your organization instance. - Secret Key: paste the [Key Secret](/docs/hcl-appscan#KeyID_KeySecret). - Key Id: paste the [Key ID](/docs/hcl-appscan#KeyID_KeySecret). - Event Types: preselected for all the event types the integration pulls. 6. Click **Submit**. ## Troubleshooting Tips - If you’re facing **invalid_client** or **unauthorized_client** issues this might be possibly due to incorrect credentials. Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.