Home
Introduction to HCL® AppScan® Source
HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop.
AppScan® Source deployment models
This section describes three different deployment models and the components that comprise each model.
Small workgroup deployment
The small workgroup deployment best fits a small to moderate size team that does not have many IT Compliance Guidelines related to application deployment.

Introduction to HCL® AppScan® Source
HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop.
- What's New in AppScan® Source
  Explore these new features that have been added to AppScan® Source - and note any features and capabilities that have been deprecated in this release.
- HCL® AppScan® Source Version 10.0.6 Readme and Release Notes®
- Migrating to the current version of AppScan® Source
  This topic contains migration information for changes that have gone into this version of AppScan® Source. If you are upgrading from an older version of AppScan Source, be sure to note the changes for the version of AppScan Source that you are upgrading and all versions leading up to this current version.
- Important concepts
  Before you begin to use or administer AppScan® Source, you should become familiar with fundamental AppScan Source concepts. This section defines basic AppScan Source terminology and concepts. Subsequent chapters repeat these definitions to help you understand their context in AppScan Source for Analysis.
- AppScan® Source deployment models
  This section describes three different deployment models and the components that comprise each model.
  - Standard desktop deployment
  - Small workgroup deployment
    The small workgroup deployment best fits a small to moderate size team that does not have many IT Compliance Guidelines related to application deployment.
  - Enterprise workgroup deployment
- Introduction to HCL® AppScan® Source for Analysis
  This section describes how AppScan® Source for Analysis fits into the total AppScan Source solution and provides a basis for understanding the software assurance workflow.
- Logging in to AppScan® Enterprise Server from AppScan® Source products
  Most AppScan® Source products and components require a connection to an AppScan Enterprise Server. The server provides centralized user management capabilities and a mechanism for sharing assessments. All user management occurs in AppScan Enterprise.
- United States government regulation compliance
  Compliance with United States government security and information technology regulations help to remove sales impediments and roadblocks. It also provides a proof point to prospects worldwide that HCL® is working to make their products the most secure in the industry. This topic lists the standards and guidelines that AppScan® Source supports.
- AppScan® Source and accessibility
  Accessibility affects users with physical disabilities, such as restricted mobility or limited vision. Accessibility issues can impede the ability to use software products successfully. This topic outlines known AppScan® Source accessibility issues and their workarounds.
- Notices
- Copyright

Small workgroup deployment

The small workgroup deployment best fits a small to moderate size team that does not have many IT Compliance Guidelines related to application deployment.

With this model, AppScan® Source server components reside on a dedicated computer, likely on the same subnet as computers running the AppScan® Source client components. The expectation is that a local AppScan® Source administrator manages AppScan® Source user accounts and that no integration exists with a corporate LDAP Directory Server. In addition, the assumption is that a source control management client on the computer provides access to source code or a copy of the source also exists on the computer.

This model enables team collaboration with a minimal amount of deployment overhead and administration. It is important to understand that this deployment model includes:

Security analysts and developers connect to the AppScan® Enterprise Server
Auditors/managers connect to the Enterprise Console component of AppScan® Enterprise Server through a web browser
AppScan® Source server components run on a dedicated computer with access to source code

An installation for a small workgroup deployment consists of the client and server components that are necessary to run AppScan® Source components on multiple computers on a network.

Server Components

AppScan® Source for Automation

Client Components

AppScan® Source for Analysis
AppScan® Source Command Line Interface
AppScan® Source for Development for Visual Studio 2019
AppScan® Source for Development for Eclipse, RAD, MobileFirst (not selected by default)