Getting started
Welcome to the documentation for HCL AppScan 360°, where you can find information about how to install, maintain, and use this service.
Installation
- AppScan Central Platform
  The AppScan Central Platform is the foundation of HCL AppScan 360°. It includes the browser-based user interface, APIs, and core server components. The AppScan Central Platform (ASCP) also requires the customer to provide an SQL Server DB and Active Directory (via LDAP).
- AppScan 360° Static Analysis
  Static analysis has changed: what was once a security tool is now a core development application. That evolution called for an evolution in the technology. AppScan 360° Static Analysis (AppScan 360° SAST) is a micro-services based, Kubernetes-managed environment that provides static analysis scanning capability in AppScan 360°. AppScan Central Platform (ASCP) communicates with AppScan 360° Static Analysis to execute scans submitted by the end users.
Administration
Define users, applications, policies, and configure DevOps integrations.
Navigation
This section describes the items on the main AppScan 360° menu bar, with links to more detailed information.
Static analysis
Use static analysis (SAST) to scan for security vulnerabilities in web and desktop applications. Static analysis includes Intelligent Finding Analytics (IFA) and Intelligent Code Analytics (ICA).
Results
The Scan History tab of your application displays your scan results (including scan statistics) and rescan options.
Reference
Some frequently asked questions, and information about integrating AppScan 360° into the product lifecycle (SDLC).

Installation

HCL AppScan 360° consists of two main components:

AppScan Central Platform: This is the foundation of AppScan 360°. It includes the browser-based user interface, APIs, and core server components. The ASCP also requires the customer to provide an SQL Server DB and Active Directory (via LDAP).
AppScan 360° Static Analysis: This is the AppScan 360° SAST service running on a K8S cluster.

To use AppScan 360° you must install both components.

Important: You must install the AppScan Central Platform first, as this creates the certificate and key you need to deploy AppScan 360° Static Analysis.