Our applications are old and have passed by a lot of technology upgrades, also we have poorly organized rules for coding which ailed with a big movement of in and out of resources created a very low performance environment. With Kiuwan we now have the ability to analyse and block bad code and start in a easy and clean way to optimize our code and fasten our applications.

Clear and simple dashboard Easy to understand the problems of the code Customization is a plus

Restrictions on technologys were can be applied

Kiuwan has a very simple UI that is easier to understand and monitor the applications for improving the overall security posture.

It has simple-to-use plug-in support for IDE and our DevOps environment.

Faced difficulty in assigning users and roles, other than that its a great tool.

You can start monitoring your software very fast and easy

The configuration of the users and its roles

Open source vulnerability and reporting part of critical vulnerabilities.

The remediation should be elaborated and detailed report should be there.

Summarising... in general, it's a great tool to analyse and improve the security of a product. Sometimes you don't have enough resources to use big tools like checkmarx, and this tool is a great alternative.

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines. Vulnerabilities are well described in the report. You can integrate it with Jira which give you a centralized visibility.

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Most and most valid vulnerabilities picked up

None at this time of the project. All requirements solved with the tool

We are solving issues like backdoors that in-house developers or third parts could have or do. Always we are looking for very high and high security bugs that could compromise the security, integrity and confidentiality of the information. We have been finding bugs in development tine and in preproduction phase. Every bug is always a good way to learn and dont repeat it in the future.

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Company where I work has many projects with large numbers of code, Kiuwan allowed to improve the quality of it

Easy to use Deep code analysis Very fast Report of results easy to understand

No cons in kiuwan use, we are very happy whith it

Awesome. Helps developers identify code security flaws in quick manner to improve the security of the application against various standards e.g. OWASP Top 10 and SANS Top 25 etc.

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Custom calender for project view. Wont give you more than 2 months view

Overall experience has been great specially taken care of legacy code wich needed our attention.

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Something simple, but a separate user license for K4D users on Android Studio environment.

We are solving a lot of problems in terms of security in appplications developed for the banking business. They require very strong solutions in terms of safety.

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

The capacity of analysis and the vulnerabilities database.

The interface it's not very clear. The review of the results is complicated for initial users.

Every day kiuwan help me about dame activity

I Think that source analysis code is perfect

The speed of work is most slow, you have to performance The speed.

Kiuwan is letting us controlling th quality of the different versions our vendors implement

Everything can be configured according with our needs

It requires a little bit deep knowledge to customize some configurations