Kiuwan

Kiuwan sast review

Artılar:

Open source vulnerability and reporting part of critical vulnerabilities.

Eksileri:

The remediation should be elaborated and detailed report should be there.

Easy to use DevSecOps static analysis tool

Yorumlar: Kiuwan has a very simple UI that is easier to understand and monitor the applications for improving the overall security posture.

Artılar:

It has simple-to-use plug-in support for IDE and our DevOps environment.

Eksileri:

Faced difficulty in assigning users and roles, other than that its a great tool.

A nice security tool

Artılar:

You can start monitoring your software very fast and easy

Eksileri:

The configuration of the users and its roles

A must use tool for development

Yorumlar: Overall experience has been great specially taken care of legacy code wich needed our attention.

Artılar:

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Eksileri:

Something simple, but a separate user license for K4D users on Android Studio environment.

Kiuwan Code Analisys

Yorumlar: Our applications are old and have passed by a lot of technology upgrades, also we have poorly organized rules for coding which ailed with a big movement of in and out of resources created a very low performance environment.
With Kiuwan we now have the ability to analyse and block bad code and start in a easy and clean way to optimize our code and fasten our applications.

Artılar:

Clear and simple dashboard Easy to understand the problems of the code Customization is a plus

Eksileri:

Restrictions on technologys were can be applied

Powerfull & Usefull, even with a small team.

Yorumlar: Summarising... in general, it's a great tool to analyse and improve the security of a product. Sometimes you don't have enough resources to use big tools like checkmarx, and this tool is a great alternative.

Artılar:

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

Eksileri:

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Kiuwan Review

Artılar:

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines. Vulnerabilities are well described in the report. You can integrate it with Jira which give you a centralized visibility.

Eksileri:

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Best Code Security tool in the market

Artılar:

Most and most valid vulnerabilities picked up

Eksileri:

None at this time of the project. All requirements solved with the tool

Code Analysis matters

Yorumlar: We are solving issues like backdoors that in-house developers or third parts could have or do. Always we are looking for very high and high security bugs that could compromise the security, integrity and confidentiality of the information.
We have been finding bugs in development tine and in preproduction phase. Every bug is always a good way to learn and dont repeat it in the future.

Artılar:

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

Eksileri:

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Kiuwn can play an important role in Secure SDLC

Yorumlar: Awesome. Helps developers identify code security flaws in quick manner to improve the security of the application against various standards e.g. OWASP Top 10 and SANS Top 25 etc.

Artılar:

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Eksileri:

Custom calender for project view. Wont give you more than 2 months view

A very complete and user-friendly tool to check your code and vulnerabilities

Yorumlar: We are solving a lot of problems in terms of security in appplications developed for the banking business. They require very strong solutions in terms of safety.

Artılar:

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

Eksileri:

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

Kiuwan Review

Artılar:

The capacity of analysis and the vulnerabilities database.

Eksileri:

The interface it's not very clear. The review of the results is complicated for initial users.

Good product

Yorumlar: Every day kiuwan help me about dame activity

Artılar:

I Think that source analysis code is perfect

Eksileri:

The speed of work is most slow, you have to performance The speed.

Great App

Artılar:

Everything Works perfect, no stress at all.

Eksileri:

Didn't get anything that i didn't like until now.

Kiuwan security

Yorumlar: It is being great, it was pretty easy to get into it and to integrate with our project.

Artılar:

It integrates well with our stack, the Java-spring stack, it traces pretty well the vulnerabilities your software has, indicating the source of the problem and where it originated.

Eksileri:

Some of the scans don't do such a great job when looking for the flow of the code, for example, we implemented a Spring filter that was not being caught by the scanned, giving so false positives.

Code analysis during Runtime. So code is not being uploaded . Also there is no limit to lines of Cod

Yorumlar: Its super agile. Instant code inspection.

Artılar:

There are 12 Security Standards. Sonarqube only offers 2. Code does not get uploaded in the cloud.Only the report does. Its quick to start.Best suited for QA. No need for any additional software for setup. Setup for Sonarquebe is tedious.

Eksileri:

Its not in Gartner´s list of security tools.This makes it difficult to convince prospective clients for making a purchase.

What a beautiful discovery!

Yorumlar: This product helps us to improve quality of our software.

Artılar:

It finds many defects in your code. It helps you to fix defects with clear explanations.

Eksileri:

Applications and portfolio configuration isn't user friendly.

Kiuwan Code Security

Yorumlar: We have helped our customers to identify problems in their source code, build an efficient solution path and implement the tasks to solve problems using the Kiuwan Code Security product.

Artılar:

- great summary and overview - easy to mark false positives - good scanner, many supported langauges

Eksileri:

- local analyzer should always be used but this is not mentioned in the documentation

It needs to evolve towards a more focused view of the security review

Artılar:

Quick and easy to use, it is comfortable and efficient

Eksileri:

It is very devotional oriented, so it is not flexible to extract full reports of results, where all the information jumps. The governance module is very powerful but it is complicated to do some information filtering.

Kiuwan Code Security review

Yorumlar: We have reduced the technical debt in less than 2 years significantly

Artılar:

Visibility of code quality at the management level. We have reduced the technical debt in less than 2 .years significantly

Eksileri:

We have reduced the technical debt in less than 2 years significantly

Usefull for big all king of projects

Artılar:

We use Kiuwan for all of our projects and it help us to verify and increase the quality of our code.

Eksileri:

It would be nice if Angular project could be analysed.

Incredible functionality

Artılar:

The software gives you feedback about the code that is susceptible for a improvement.

Eksileri:

Sometimes it takes a lot of time to load the software

Code analysis for everything

Artılar:

The quick support The functionality The dashboard The integration with Github

Eksileri:

No support for GOLANG No support for Slack The price

Great to control the quality of our deployments

Yorumlar: Kiuwan is letting us controlling th quality of the different versions our vendors implement

Artılar:

Everything can be configured according with our needs

Eksileri:

It requires a little bit deep knowledge to customize some configurations

Kiuwan is Amazing in Code Analysis

Yorumlar: Company where I work has many projects with large numbers of code, Kiuwan allowed to improve the quality of it

Artılar:

Easy to use Deep code analysis Very fast Report of results easy to understand

Eksileri:

No cons in kiuwan use, we are very happy whith it