IBM Support

Demo web sites for testing AppScan products



Are there web applications that can be scanned by IBM Security AppScan Standard and IBM Security AppScan Enterprise before scanning your web application?


Yes, there is a demo web application, called Altoro Mutual, that you can use for test scanning.  

There are additional applications/services with identical login credentials for demonstration and test purposes:


Note: The evaluation version of AppScan Standard (without any license) can scan only .

Note: A version of the Java version of Altoro is available for download at
You can host it in your environment and use it for your internal training and other purposes. However, it will work only with licensed AppScan Standard instances (it will not work with demo licenses).

Cross reference information
Product Component Platform Version Edition
IBM Security AppScan Enterprise Documentation

Historical Number


Document information

More support for: IBM Security AppScan Standard

Component: Documentation

Software version: Version Independent

Operating system(s): Windows

Reference #: 1288823

Modified date: 11 March 2019