Kiuwan

Vorteile

Open source vulnerability and reporting part of critical vulnerabilities.

Nachteile

The remediation should be elaborated and detailed report should be there.

In Betracht gezogene Alternativen

Vorteile

It has simple-to-use plug-in support for IDE and our DevOps environment.

Nachteile

Faced difficulty in assigning users and roles, other than that its a great tool.

Vorteile

You can start monitoring your software very fast and easy

Nachteile

The configuration of the users and its roles

Vorteile

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Nachteile

Something simple, but a separate user license for K4D users on Android Studio environment.

Vorteile

Clear and simple dashboard
Easy to understand the problems of the code
Customization is a plus

Nachteile

Restrictions on technologys were can be applied

Vorteile

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

Nachteile

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Vorteile

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines.
Vulnerabilities are well described in the report.
You can integrate it with Jira which give you a centralized visibility.

Nachteile

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Vorteile

Most and most valid vulnerabilities picked up

Nachteile

None at this time of the project. All requirements solved with the tool

Vorteile

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

Nachteile

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Vorteile

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Nachteile

Custom calender for project view. Wont give you more than 2 months view

Vorteile

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

Nachteile

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

Vorteile

The capacity of analysis and the vulnerabilities database.

Nachteile

The interface it's not very clear. The review of the results is complicated for initial users.

Vorteile

I Think that source analysis code is perfect

Nachteile

The speed of work is most slow, you have to performance The speed.

Vorteile

Everything Works perfect, no stress at all.

Nachteile

Didn't get anything that i didn't like until now.

Vorteile

It integrates well with our stack, the Java-spring stack, it traces pretty well the vulnerabilities your software has, indicating the source of the problem and where it originated.

Nachteile

Some of the scans don't do such a great job when looking for the flow of the code, for example, we implemented a Spring filter that was not being caught by the scanned, giving so false positives.

Vorteile

There are 12 Security Standards. Sonarqube only offers 2.
Code does not get uploaded in the cloud.Only the report does.
Its quick to start.Best suited for QA. No need for any additional software for setup. Setup for Sonarquebe is tedious.

Nachteile

Its not in Gartner´s list of security tools.This makes it difficult to convince prospective clients for making a purchase.

Vorteile

It finds many defects in your code.
It helps you to fix defects with clear explanations.

Nachteile

Applications and portfolio configuration isn't user friendly.

Vorteile

- great summary and overview
- easy to mark false positives
- good scanner, many supported langauges

Nachteile

- local analyzer should always be used but this is not mentioned in the documentation

Vorteile

Quick and easy to use, it is comfortable and efficient

Nachteile

It is very devotional oriented, so it is not flexible to extract full reports of results, where all the information jumps. The governance module is very powerful but it is complicated to do some information filtering.

Vorteile

Visibility of code quality at the management level. We have reduced the technical debt in less than 2 .years significantly

Nachteile

We have reduced the technical debt in less than 2 years significantly

Vorteile

We use Kiuwan for all of our projects and it help us to verify and increase the quality of our code.

Nachteile

It would be nice if Angular project could be analysed.

Vorteile

The software gives you feedback about the code that is susceptible for a improvement.

Nachteile

Sometimes it takes a lot of time to load the software

Vorteile

The quick support
The functionality
The dashboard
The integration with Github

Nachteile

No support for GOLANG
No support for Slack
The price

Vorteile

Everything can be configured according with our needs

Nachteile

It requires a little bit deep knowledge to customize some configurations

Vorteile

Easy to use
Deep code analysis
Very fast
Report of results easy to understand

Nachteile

No cons in kiuwan use, we are very happy whith it

Vorteile

In my case as a manager kiuwan Code Security Review is core to guarantee before going to production that code is valid. Besides you can configure exceptions or reviews ad hoc to your organization.

Nachteile

I don´t think of any cons. My providers get used to it very easily.

Vorteile

O produto é muito fácil de usar. Tem recursos ótimos.

Nachteile

Poderia ser mais fácil de usar e armazenar o acesso remoto.

Vorteile

The simplicity and the ease of use of the product as well as the integration with other tools.

Nachteile

There are few false positive and not relevant results which could consume time in manual analysis.

Vorteile

Easy to use, the quality of reports and creating specific action plans.

Nachteile

I want more integration with Visual Studio in Visual Studio Developer Extension like Sonar had.

Vorteile

Features, Support, Possibilities, Easy usgage

Nachteile

False positives after executing static code analysis.

Vorteile

This is a good software and it is very reliable.

Nachteile

This software don't have any problem to use.

Vorteile

This is really usefull for improve the code

Nachteile

It is not an easy tool, but with the tutorials ypur can learn how to use it easyly

Vorteile

Its easy to use, and complete solution for developers

Nachteile

The price is somewhat high for private individuals

Vorteile

Based in cloud. Easy to work from anywhere
Explanation of vulnerabilities

Nachteile

Converting CSV files to excell
No PDF reports wiht INSIGHT
Select dates with 'custom range'

Vorteile

Easy access to code check, and flexibility for establish rules.

Nachteile

Some technology is not supported correctly