You can scan an Eclipse or Rational® Application Developer for WebSphere® Software (RAD) workspace, project, or file. This includes scanning Java (including Android), JavaServer Pages (JSP), and IBM® MobileFirst Platform projects.

Before you begin

See Scan considerations to learn about operating system-specific considerations, language-specific considerations, or other restrictions that may affect your scans.

Note: If you are scanning an IBM® MobileFirst Platform project, see Scanning a MobileFirst Platform project.
Note: As of version, AppScan® Source no longer supports macOS or iOS Xcode project scanning.

About this task

When you select a scan action, the scan configuration that has been chosen in Scan Configuration dialog box will be applied. For information about scan configurations, see Scan configurations.

Right-click the application in the Package Explorer and select Run Scan from the menu or follow these steps:

Right-click the project in the Solution Explorer and select Scan Project from the menu or follow these steps:


  1. Import or create a workspace,solution, project, or file.
  2. Choose one of these options from the main menu:
    • Security Analysis > Scan > Scan Workspace
    • Security Analysis > Scan > Scan Project
    • Security Analysis > Scan > Scan File
    • HCL AppScan Source > Scan > Scan Solution
    • HCL AppScan Source > Scan > Scan Project
    • HCL AppScan Source > Scan > Scan File
  3. The scan begins and messages display in the Console viewOutput window.


If you are connected to the AppScan® Enterprise Server and you are scanning an application for which custom rules were created in AppScan® Source for Analysis, the scan will include those custom rules.