It supports multiple languages and makes it easy to identify vulnerabilities and it's easy to understand Review collected by and hosted on G2.com.

Nothing specific that I can point out. I'm happy with the module Review collected by and hosted on G2.com.

* Easy to use.

*The dashboard is practical.

* Requires minimal configuration. Review collected by and hosted on G2.com.

* In languages like Angular it doesn't detect vulnerabilities.

* Provides little help to the programmer for remediation.

* Doesn't have training tools.

* Support services is very deficient. Review collected by and hosted on G2.com.

Ease of use, messages of possible solutions, very intuitive, with many customization options. Review collected by and hosted on G2.com.

Most negative point, complex source code load, although it has improved a lot over the versions. Review collected by and hosted on G2.com.

Integrations with Jenkins and view reports. I like how you can handle and move around the environment handling the definition and indication of where the correction should be applied. Many people do not have this access and cannot handle this type of information. But for the company it was very important. I also really like the great color that the environment has. This helps a lot to be able to detect with priority which problem I should tackle first. I also quite liked the easy integration with Jenkis. For me this was quite important. The use of additional parameters and all parameters. I also liked how the projects can be separated to group the reports. Review collected by and hosted on G2.com.

I did not like not having the option to view the report from the registry of the local Kiuwan analyzer. I think I should be able to see the reports from the local tool and be able to export them to xml files to be able to see these reports directly from jenkisn and not have to go to log in to the kiuwan portal and go to review the results there. This type of limitation is quite cumbersome. you have to make many improvements in this. Review collected by and hosted on G2.com.

What I like the most is being able to launch the analysis locally without having to wait for the analysis queues. It is also very easy to configure and create your own rules. Review collected by and hosted on G2.com.

I have to investigate the integration with Git for sending emails to the person who has uploaded bad code. I think it is not yet possible or it is difficult to configure. Review collected by and hosted on G2.com.

Kiuwan is a powerful tool that help our developers to create secure software.

Also, the code quality component is very good. It provides a lot of information of governance and it has support for many languages and frameworks.

It's well integrated with other tools like development environments or continuos integration tools like jenkins. You could integrate easily Kiuwan in your SDLC.

The Kiuwan support team is very effective. Review collected by and hosted on G2.com.

Like any SAST tool, Kiuwan creates some false positives.

Kiuwan don't have a notification system to inform the development teams and auditors.

Sometimes it's complicated to understand the description of the vulnerabilies detected by the tool.

It's necessary to improve the review of a defect. Review collected by and hosted on G2.com.

A lot of compatibility with different coding languages and good size metrics. Review collected by and hosted on G2.com.

More document regular error issues will be great. Review collected by and hosted on G2.com.

We have integrated Kiuwan in our DevOps chain without issues, using TFS and other tools in this chain. We have already found a good bunch of security leaks, specially in older versions of our soon developments. We manage very different code languages and versions, the "dialects" covered by Kiuwan is very complete in this case. A very nice feature is the integration with code editors and IDE's. Review collected by and hosted on G2.com.

Maybe the licensing politics per MLoC, an unlimited enterprise license would be better. MloC make you continuously review the licensing conditions and this in not very confortable in our case, where we are continuously developing new and taking out old lines of code. Another nice to have would be to integrate your code checking plugins with free but fully functional editors like Atom or others. Review collected by and hosted on G2.com.

Knowledge about what you REALLY have in your solutions. For us is like buying a car knowing every part detailed haw it's working in the engine, detailing the future problem we can have with everyone.

If your car outside is very nice but not inside your purchase was not good. And we buy code and sell applications to our businesses. It's one of our main tools to produce code with quality. Review collected by and hosted on G2.com.

Perhaps I'd like to have the possibility to change the ponderation of every concept and accesing directly to the tables to get the information we can need, instead of having to get this info vía API. Sometimes when you have the administration it's very fast to have access to the data base to solve something or have some answers. Building and API takes time. Review collected by and hosted on G2.com.

Real time agent status monitoring, agent logging and It is very cost effective compared to its performance and the features it offers. I like the way it assesses the applications. Review collected by and hosted on G2.com.

The tool kiuwan SAST is oblivious of the inner workings of the application being tested. It is unaware of the some of programming languages, need to add more and need to improve the performance. Review collected by and hosted on G2.com.