• AUTOMATION
  • DEPLOYMENT
  • MONITORING
  • HUMAN

How to start DAST scans with your AI agent

Connect HCL AppScan to your agent to automate security testing. Once connected, you can trigger scans via chat as soon as your deployment finishes.

Ask AI about this page

Short answer

How can I trigger a DAST scan using my AI?

You tell your agent to start a scan, and it uses the HCL AppScan connection to initiate the test against your web application. This allows you to run security checks right after a deployment without leaving your chat interface. You'll get immediate confirmation when the scan begins.

Scan outcomes.

Where your security testing lands.

The AI handles the communication with AppScan so you can focus on the results.

AUTOMATION

Instant scan triggers

The agent uses the connection to call the scan tool. This removes the need to manually log into the AppScan console to start a test.

DEPLOYMENT

Post-deploy security

You can link your deployment notifications to your agent. This ensures every new version of your app gets tested immediately.

MONITORING

Scan status tracking

The agent keeps track of the scan progress. You can ask for updates on whether the test is still running or if it finished.

HUMAN

Manual triage needed

The AI starts the scan, but you still need to review the actual vulnerabilities found. You decide which security issues require a fix.

The workflow

What your AI does when the command arrives.

Your agent acts as the bridge between your chat window and the AppScan engine.

  1. Receive command

    Your agent parses your request to identify the target application and the intent to run a security test.

    start_dast_scan

  2. Initiate scan

    The agent sends the necessary parameters to HCL AppScan to kick off the dynamic analysis.

    start_dast_scan

  3. Confirm execution

    The agent verifies that the scan request was accepted by the AppScan service.

    start_dast_scan

  4. Report status

    The agent tells you that the scan is underway and provides any immediate feedback from the tool.

    start_dast_scan

Try it

Copy these to start.

Use these prompts to get your security testing moving.

Starting points

Replace the bracketed text with your actual application details or scan configurations.

HCL AppScan Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — HCL AppScan capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hcl-appscan-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
    }
  }
}
Copy into chat04

  • Start a new DAST scan for the production web app at https://example.com.

  • Trigger a security scan for the staging environment on the 'Main-App' target.

  • Run a DAST scan for the new deployment on the user-auth service.

  • Initiate a dynamic security test for the internal dashboard application.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect HCL AppScan once, then ask.

You only need to link your HCL AppScan account once. After that, your agent handles all the tool calls through the Vinkius-hosted connection.

Connect HCL AppScan to your AI

FAQ

Common questions about DAST automation

  • 01

    Can the AI fix the vulnerabilities it finds?

    No. The AI can only start the scan. You must review the findings and apply the fixes yourself.

  • 02

    Does the AI need my AppScan login credentials?

    No. You connect the MCP through Vinkius, which manages the connection securely. Your agent never sees your raw passwords.

  • 03

    Can I schedule scans through the AI?

    No. This specific tool is for initiating scans immediately via chat commands.

  • 04

    Will the AI delete my existing scan configurations?

    No. The agent only has the ability to start new scans using the provided tool.

  • 05

    Can the AI run a scan on a mobile app?

    No. This tool is specifically for DAST scans on web applications.

  • More questions about HCL AppScan? See everything the HCL AppScan Connector can do

Connect HCL AppScan to Claude, Cursor, ChatGPT & more