Kiuwan

Avantages

Open source vulnerability and reporting part of critical vulnerabilities.

Inconvénients

The remediation should be elaborated and detailed report should be there.

Alternatives envisagées 

Avantages

It has simple-to-use plug-in support for IDE and our DevOps environment.

Inconvénients

Faced difficulty in assigning users and roles, other than that its a great tool.

Avantages

You can start monitoring your software very fast and easy

Inconvénients

The configuration of the users and its roles

Avantages

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Inconvénients

Something simple, but a separate user license for K4D users on Android Studio environment.

Avantages

Clear and simple dashboard
Easy to understand the problems of the code
Customization is a plus

Inconvénients

Restrictions on technologys were can be applied

Avantages

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

Inconvénients

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Avantages

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines.
Vulnerabilities are well described in the report.
You can integrate it with Jira which give you a centralized visibility.

Inconvénients

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Avantages

Most and most valid vulnerabilities picked up

Inconvénients

None at this time of the project. All requirements solved with the tool

Avantages

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

Inconvénients

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Avantages

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Inconvénients

Custom calender for project view. Wont give you more than 2 months view

Avantages

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

Inconvénients

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

Avantages

The capacity of analysis and the vulnerabilities database.

Inconvénients

The interface it's not very clear. The review of the results is complicated for initial users.

Avantages

I Think that source analysis code is perfect

Inconvénients

The speed of work is most slow, you have to performance The speed.

Avantages

Everything Works perfect, no stress at all.

Inconvénients

Didn't get anything that i didn't like until now.

Avantages

It integrates well with our stack, the Java-spring stack, it traces pretty well the vulnerabilities your software has, indicating the source of the problem and where it originated.

Inconvénients

Some of the scans don't do such a great job when looking for the flow of the code, for example, we implemented a Spring filter that was not being caught by the scanned, giving so false positives.

Avantages

There are 12 Security Standards. Sonarqube only offers 2.
Code does not get uploaded in the cloud.Only the report does.
Its quick to start.Best suited for QA. No need for any additional software for setup. Setup for Sonarquebe is tedious.

Inconvénients

Its not in Gartner´s list of security tools.This makes it difficult to convince prospective clients for making a purchase.

Avantages

It finds many defects in your code.
It helps you to fix defects with clear explanations.

Inconvénients

Applications and portfolio configuration isn't user friendly.

Avantages

- great summary and overview
- easy to mark false positives
- good scanner, many supported langauges

Inconvénients

- local analyzer should always be used but this is not mentioned in the documentation

Avantages

Quick and easy to use, it is comfortable and efficient

Inconvénients

It is very devotional oriented, so it is not flexible to extract full reports of results, where all the information jumps. The governance module is very powerful but it is complicated to do some information filtering.

Avantages

Visibility of code quality at the management level. We have reduced the technical debt in less than 2 .years significantly

Inconvénients

We have reduced the technical debt in less than 2 years significantly

Avantages

We use Kiuwan for all of our projects and it help us to verify and increase the quality of our code.

Inconvénients

It would be nice if Angular project could be analysed.

Avantages

The software gives you feedback about the code that is susceptible for a improvement.

Inconvénients

Sometimes it takes a lot of time to load the software

Avantages

The quick support
The functionality
The dashboard
The integration with Github

Inconvénients

No support for GOLANG
No support for Slack
The price

Avantages

Everything can be configured according with our needs

Inconvénients

It requires a little bit deep knowledge to customize some configurations

Avantages

Easy to use
Deep code analysis
Very fast
Report of results easy to understand

Inconvénients

No cons in kiuwan use, we are very happy whith it