HCLSoftware Launches New Version Of AppScan 360º To Address Supply Chain Risks

HCLSoftware has released version 2.0 of its HCL AppScan 360º platform, aiming to give enterprises greater control over software supply chains as open-source adoption accelerates and data regulations tighten.

The new release delivers application security testing, software composition analysis and automated software bill of materials generation within secure on-premises or sovereign cloud environments.

Rising Supply Chain Pressures

High-profile vulnerabilities such as Log4Shell have highlighted the risks created by reliance on open-source software components sourced from multiple repositories. Enterprises often depend on hundreds or even thousands of components, many of which lack visibility into origins, licensing and security.

At the same time, governments are imposing stricter rules. Gartner estimates that more than 70 per cent of countries have introduced or are drafting data sovereignty laws. Regulations such as the EU’s Cyber Resilience Act and the US Executive Order on Improving the Nation’s Cybersecurity require faster patching, stronger oversight and full lifecycle visibility of software components.

Rajesh Iyer, Executive Vice President and Portfolio Manager at HCLSoftware, said the pressures are reshaping development practices.

“The global move towards data sovereignty is changing the ecosystem in which secure development happens, but not the increasing pace, which is driven to a large degree by open-source adoption and Ai tooling,” Iyer said. “These pressures are forcing organizations to rethink how they manage open-source software, track vulnerabilities and control where and how their data is stored and processed.”

Platform Capabilities

HCL AppScan 360º version 2.0 combines several testing and remediation technologies, including dynamic, static, interactive and composition analysis, as well as security testing for APIs, infrastructure-as-code and secrets.

Key features include:

• Real-time open-source vulnerability detection with high-density composition analysis
  
  
• Automated SBOM creation for visibility into dependencies, versions and sources
  
  
• Deployment flexibility in air-gapped or sovereign environments
  
  
• Correlation of findings from multiple technologies to confirm exploitability and validate fixes

Katie Norton, Research Manager for DevSecOps at IDC, said the ability to run composition analysis on premises is important for many enterprises.

“IDC research shows that nearly 85 per cent of organizations currently deploy at least some application security tools on premises, even as cloud adoption grows,” Norton said. “The availability of on-premises SCA in AppScan 360º Version 2.0 addresses a critical gap for enterprises that require deep open-source visibility while maintaining full control over their infrastructure and data locality.”

Building Trust Through Data Sovereignty

HCLSoftware said the platform not only helps organisations meet compliance requirements but also strengthens customer trust.

A Cisco survey found that 92 per cent of consumers prefer their data to be stored in their home country, underscoring the growing importance of sovereignty as a business differentiator.

“We are delivering on a promise to our customers with a fully on-prem platform that provides up-to-the-minute open-source visibility and Ai enablement, all without exposing their data to the public cloud,” Iyer said.

By providing full visibility and secure, localised operations, HCL AppScan 360º is positioned to help security teams shift from reactive response to proactive governance.

More information is available at HCL AppScan.

Last Updated on September 12, 2025 by Nick Ross