• CRITICAL
  • CONTEXT
  • SCOPE
  • HUMAN

How to triage vulnerabilities with your AI

Connect HCL AppScan to your AI client to pull scan data and identify critical security flaws through a simple chat interface.

Ask AI about this page

Short answer

How can I triage vulnerabilities with my AI?

Your AI pulls specific application data and issue lists directly from HCL AppScan. You can then ask it to find high-severity threats and summarize findings. This breakdown shows you exactly how it works.

Where your triage results land.

The outcomes of your triage.

The AI processes your scan data into these specific results.

CRITICAL

High-severity findings

The AI identifies the most dangerous security flaws in your application. You get a clear list of what to fix first.

CONTEXT

Detailed issue data

The AI pulls specific technical details for any single vulnerability. You get the exact information needed to understand the risk.

SCOPE

Application-specific views

The AI narrows down findings to a single application. You get a focused view of one target instead of a massive report.

HUMAN

Manual remediation

The AI finds the problems, but you decide how to patch the code. You keep full control over the actual security fixes.

The workflow

What your AI does when the scan data arrives.

The AI handles the data retrieval so you can focus on the analysis.

  1. Identify the target

    The AI looks up the specific application you want to investigate to ensure it is working with the right data.

    get_app

  2. Retrieve issue lists

    The AI pulls the full list of security findings associated with your chosen application.

    list_issues

  3. Filter for severity

    The AI sifts through the findings to isolate the high-severity threats you asked for.

    list_issues

  4. Deep dive into flaws

    The AI pulls the specific technical details for a single vulnerability to explain the risk.

    get_issue

Try it

Copy these to start.

Use these prompts to begin your triage session.

Starting points

These are opening lines. Swap out the application names and issue types with your actual HCL AppScan data.

HCL AppScan Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — HCL AppScan capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hcl-appscan-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
    }
  }
}
Copy into chat04

  • List all high-severity issues for the WebPortal application.

  • Get the details for the SQL Injection issue in the PaymentGateway app.

  • Show me all issues found in the CustomerAPI application.

  • Summarize the most critical vulnerabilities for the MobileAuth app.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect HCL AppScan once, then ask.

Connect your account once and your credentials stay encrypted. You can then immediately start chatting with your scan data.

Connect HCL AppScan to your AI

FAQ

How this task behaves

  • 01

    Can the AI fix the security vulnerabilities for me?

    No. The AI only reads and analyzes the issues found in HCL AppScan. You must perform the actual code changes yourself.

  • 02

    Can the AI delete issues from my HCL AppScan reports?

    No. The AI only has read access to list and get information. It cannot modify or delete any data in HCL AppScan.

  • 03

    Can I ask about issues in a specific app?

    Yes. You can ask the AI to focus on a single application to narrow down the triage process.

  • 04

    Does the AI see all my applications?

    The AI can see the applications you allow it to access, but it only interacts with the ones you specifically ask about.

  • 05

    Can the AI create new scan reports?

    No. The AI can only retrieve existing data from your HCL AppScan account.

  • More questions about HCL AppScan? The Connector page answers them. See everything the HCL AppScan Connector can do

Connect HCL AppScan to Claude, Cursor, ChatGPT & more