Kiuwan Code Security & Insights Reviews & Product Details

It supports multiple languages and makes it easy to identify vulnerabilities and it's easy to understand Review collected by and hosted on G2.com.

Nothing specific that I can point out. I'm happy with the module Review collected by and hosted on G2.com.

* Easy to use.

*The dashboard is practical.

* Requires minimal configuration. Review collected by and hosted on G2.com.

* In languages like Angular it doesn't detect vulnerabilities.

* Provides little help to the programmer for remediation.

* Doesn't have training tools.

* Support services is very deficient. Review collected by and hosted on G2.com.

Ease of use, messages of possible solutions, very intuitive, with many customization options. Review collected by and hosted on G2.com.

Most negative point, complex source code load, although it has improved a lot over the versions. Review collected by and hosted on G2.com.

Integrations with Jenkins and view reports. I like how you can handle and move around the environment handling the definition and indication of where the correction should be applied. Many people do not have this access and cannot handle this type of information. But for the company it was very important. I also really like the great color that the environment has. This helps a lot to be able to detect with priority which problem I should tackle first. I also quite liked the easy integration with Jenkins. For me this was quite important. The use of additional parameters and all parameters. I also liked how the projects can be separated to group the reports. Review collected by and hosted on G2.com.

I did not like not having the option to view the report from the registry of the local Kiuwan analyzer. I think I should be able to see the reports from the local tool and be able to export them to xml files to be able to see these reports directly from Jenkins and not have to go to log in to the Kiuwan portal and go to review the results there. This type of limitation is quite cumbersome. You have to make many improvements in this. Review collected by and hosted on G2.com.

What I like the most is being able to launch the analysis locally without having to wait for the analysis queues. It is also very easy to configure and create your own rules. Review collected by and hosted on G2.com.

I have to investigate the integration with Git for sending emails to the person who has uploaded bad code. I think it is not yet possible or it is difficult to configure. Review collected by and hosted on G2.com.

Kiuwan is a powerful tool that helps our developers create secure software. Also, the code quality component is very good. It provides a lot of information on governance and supports many languages and frameworks. It's well integrated with other tools like development environments or continuous integration tools like Jenkins. You can easily integrate Kiuwan into your SDLC. The Kiuwan support team is very effective. Review collected by and hosted on G2.com.

Like any SAST tool, Kiuwan creates some false positives. Kiuwan doesn't have a notification system to inform the development teams and auditors. Sometimes it's complicated to understand the description of the vulnerabilities detected by the tool. It's necessary to improve the review of a defect. Review collected by and hosted on G2.com.

A lot of compatibility with different coding languages and good size metrics. Review collected by and hosted on G2.com.

More document regular error issues will be great. Review collected by and hosted on G2.com.

We have integrated Kiuwan in our DevOps chain without issues, using TFS and other tools in this chain. We have already found a good bunch of security leaks, especially in older versions of our soon developments. We manage very different code languages and versions, the "dialects" covered by Kiuwan is very complete in this case. A very nice feature is the integration with code editors and IDE's. Review collected by and hosted on G2.com.

Maybe the licensing politics per MLoC, an unlimited enterprise license would be better. MloC make you continuously review the licensing conditions and this is not very comfortable in our case, where we are continuously developing new and taking out old lines of code. Another nice to have would be to integrate your code checking plugins with free but fully functional editors like Atom or others. Review collected by and hosted on G2.com.

Knowledge about what you REALLY have in your solutions. For us, it's like buying a car knowing every part in detail, how it's working in the engine, detailing the future problems we can have with each one. If your car looks nice on the outside but not inside, your purchase was not good. And we buy code and sell applications to our businesses. It's one of our main tools to produce code with quality. Review collected by and hosted on G2.com.

Perhaps I'd like to have the possibility to change the weighting of every concept and access directly to the tables to get the information we might need, instead of having to get this info via API. Sometimes when you have the administration, it's very fast to have access to the database to solve something or get some answers. Building an API takes time. Review collected by and hosted on G2.com.

Real time agent status monitoring, agent logging and It is very cost effective compared to its performance and the features it offers. I like the way it assesses the applications. Review collected by and hosted on G2.com.

The tool kiuwan SAST is oblivious of the inner workings of the application being tested. It is unaware of the some of programming languages, need to add more and need to improve the performance. Review collected by and hosted on G2.com.