Our applications are old and have passed by a lot of technology upgrades, also we have poorly organized rules for coding which ailed with a big movement of in and out of resources created a very low performance environment. With Kiuwan we now have the ability to analyse and block bad code and start in a easy and clean way to optimize our code and fasten our applications.

Clear and simple dashboard Easy to understand the problems of the code Customization is a plus

Restrictions on technologys were can be applied

Kiuwan has a very simple UI that is easier to understand and monitor the applications for improving the overall security posture.

It has simple-to-use plug-in support for IDE and our DevOps environment.

Faced difficulty in assigning users and roles, other than that its a great tool.

You can start monitoring your software very fast and easy

The configuration of the users and its roles

Open source vulnerability and reporting part of critical vulnerabilities.

The remediation should be elaborated and detailed report should be there.

Summarising... in general, it's a great tool to analyse and improve the security of a product. Sometimes you don't have enough resources to use big tools like checkmarx, and this tool is a great alternative.

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines. Vulnerabilities are well described in the report. You can integrate it with Jira which give you a centralized visibility.

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Most and most valid vulnerabilities picked up

None at this time of the project. All requirements solved with the tool

We are solving issues like backdoors that in-house developers or third parts could have or do. Always we are looking for very high and high security bugs that could compromise the security, integrity and confidentiality of the information. We have been finding bugs in development tine and in preproduction phase. Every bug is always a good way to learn and dont repeat it in the future.

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Company where I work has many projects with large numbers of code, Kiuwan allowed to improve the quality of it

Easy to use Deep code analysis Very fast Report of results easy to understand

No cons in kiuwan use, we are very happy whith it

Awesome. Helps developers identify code security flaws in quick manner to improve the security of the application against various standards e.g. OWASP Top 10 and SANS Top 25 etc.

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Custom calender for project view. Wont give you more than 2 months view

Overall experience has been great specially taken care of legacy code wich needed our attention.

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Something simple, but a separate user license for K4D users on Android Studio environment.

We are solving a lot of problems in terms of security in appplications developed for the banking business. They require very strong solutions in terms of safety.

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

The capacity of analysis and the vulnerabilities database.

The interface it's not very clear. The review of the results is complicated for initial users.

Every day kiuwan help me about dame activity

I Think that source analysis code is perfect

The speed of work is most slow, you have to performance The speed.

Kiuwan is letting us controlling th quality of the different versions our vendors implement

Everything can be configured according with our needs

It requires a little bit deep knowledge to customize some configurations

Everything Works perfect, no stress at all.

Didn't get anything that i didn't like until now.

In my case as a manager kiuwan Code Security Review is core to guarantee before going to production that code is valid. Besides you can configure exceptions or reviews ad hoc to your organization.

I don´t think of any cons. My providers get used to it very easily.

It is being great, it was pretty easy to get into it and to integrate with our project.

It integrates well with our stack, the Java-spring stack, it traces pretty well the vulnerabilities your software has, indicating the source of the problem and where it originated.

Some of the scans don't do such a great job when looking for the flow of the code, for example, we implemented a Spring filter that was not being caught by the scanned, giving so false positives.

Its super agile. Instant code inspection.

There are 12 Security Standards. Sonarqube only offers 2. Code does not get uploaded in the cloud.Only the report does. Its quick to start.Best suited for QA. No need for any additional software for setup. Setup for Sonarquebe is tedious.

Its not in Gartner´s list of security tools.This makes it difficult to convince prospective clients for making a purchase.

This product helps us to improve quality of our software.

It finds many defects in your code. It helps you to fix defects with clear explanations.

Applications and portfolio configuration isn't user friendly.

We have helped our customers to identify problems in their source code, build an efficient solution path and implement the tasks to solve problems using the Kiuwan Code Security product.

- great summary and overview - easy to mark false positives - good scanner, many supported langauges

- local analyzer should always be used but this is not mentioned in the documentation

Quick and easy to use, it is comfortable and efficient

It is very devotional oriented, so it is not flexible to extract full reports of results, where all the information jumps. The governance module is very powerful but it is complicated to do some information filtering.

We have reduced the technical debt in less than 2 years significantly

Visibility of code quality at the management level. We have reduced the technical debt in less than 2 .years significantly

We have reduced the technical debt in less than 2 years significantly

We use Kiuwan for all of our projects and it help us to verify and increase the quality of our code.

It would be nice if Angular project could be analysed.

The software gives you feedback about the code that is susceptible for a improvement.

Sometimes it takes a lot of time to load the software