Opiniones de Kiuwan

Kiuwan sast review

Puntos a favor:

Open source vulnerability and reporting part of critical vulnerabilities.

Puntos en contra:

The remediation should be elaborated and detailed report should be there.

Alternativas consideradas previamente: SonarQube

Easy to use DevSecOps static analysis tool

Comentarios: Kiuwan has a very simple UI that is easier to understand and monitor the applications for improving the overall security posture.

Puntos a favor:

It has simple-to-use plug-in support for IDE and our DevOps environment.

Puntos en contra:

Faced difficulty in assigning users and roles, other than that its a great tool.

A nice security tool

Puntos a favor:

You can start monitoring your software very fast and easy

Puntos en contra:

The configuration of the users and its roles

A must use tool for development

Comentarios: Overall experience has been great specially taken care of legacy code wich needed our attention.

Puntos a favor:

Great tool for developers to validate code compliance. Management for oversight progress and forecasting. Also easy integration on CD / CI environment.

Puntos en contra:

Something simple, but a separate user license for K4D users on Android Studio environment.

Kiuwan Code Analisys

Comentarios: Our applications are old and have passed by a lot of technology upgrades, also we have poorly organized rules for coding which ailed with a big movement of in and out of resources created a very low performance environment.
With Kiuwan we now have the ability to analyse and block bad code and start in a easy and clean way to optimize our code and fasten our applications.

Puntos a favor:

Clear and simple dashboard Easy to understand the problems of the code Customization is a plus

Puntos en contra:

Restrictions on technologys were can be applied

Powerfull & Usefull, even with a small team.

Comentarios: Summarising... in general, it's a great tool to analyse and improve the security of a product. Sometimes you don't have enough resources to use big tools like checkmarx, and this tool is a great alternative.

Puntos a favor:

It's simple. You don't need a big team to get all potential of this tool. It can be used by 2 or 3 people. That's great for small pentesting teams or product teams.

Puntos en contra:

It's new and... it's simple. The same pro could be used as Con. Maybe it's just matter of time, but Kiuwan should improve its performance and features.

Kiuwan Review

Puntos a favor:

Kiuwan give you the ability to integrate the scanner with almost all the Editors and also in your pipelines. Vulnerabilities are well described in the report. You can integrate it with Jira which give you a centralized visibility.

Puntos en contra:

The line of codes limitations are strict and it could fail your build if you exceed the limitation with only 1 line in plus.

Best Code Security tool in the market

Puntos a favor:

Most and most valid vulnerabilities picked up

Puntos en contra:

None at this time of the project. All requirements solved with the tool

Code Analysis matters

Comentarios: We are solving issues like backdoors that in-house developers or third parts could have or do. Always we are looking for very high and high security bugs that could compromise the security, integrity and confidentiality of the information.
We have been finding bugs in development tine and in preproduction phase. Every bug is always a good way to learn and dont repeat it in the future.

Puntos a favor:

I like a lot that Kiuwan it’s easy to use, by the other side, it helps a lot to development teams and QA members to find new opportunities to enrich the source code of every application.

Puntos en contra:

I think it could help that results of the analysis could show a little more of the code involved, I mean, in the moment we see a bug details, you just can see the very specific line of code. I little more of code could help and sometimes avoid to go to the file.

Kiuwn can play an important role in Secure SDLC

Comentarios: Awesome. Helps developers identify code security flaws in quick manner to improve the security of the application against various standards e.g. OWASP Top 10 and SANS Top 25 etc.

Puntos a favor:

Ease of use and user friendliness. Most of the options are self-explanatory. Also, cloud and local analyzer enables users to use it inflexibly manner

Puntos en contra:

Custom calender for project view. Wont give you more than 2 months view

A very complete and user-friendly tool to check your code and vulnerabilities

Comentarios: We are solving a lot of problems in terms of security in appplications developed for the banking business. They require very strong solutions in terms of safety.

Puntos a favor:

It's very user-friendly. It provides a lot of information about your code and supports a lot of languages even for mobility.

Puntos en contra:

There are other tools like HP Fortify, and I consider that some vulnerabilities are not detected in Kiuwan.

Kiuwan Review

Puntos a favor:

The capacity of analysis and the vulnerabilities database.

Puntos en contra:

The interface it's not very clear. The review of the results is complicated for initial users.

Good product

Comentarios: Every day kiuwan help me about dame activity

Puntos a favor:

I Think that source analysis code is perfect

Puntos en contra:

The speed of work is most slow, you have to performance The speed.

Great App

Puntos a favor:

Everything Works perfect, no stress at all.

Puntos en contra:

Didn't get anything that i didn't like until now.

Kiuwan security

Comentarios: It is being great, it was pretty easy to get into it and to integrate with our project.

Puntos a favor:

It integrates well with our stack, the Java-spring stack, it traces pretty well the vulnerabilities your software has, indicating the source of the problem and where it originated.

Puntos en contra:

Some of the scans don't do such a great job when looking for the flow of the code, for example, we implemented a Spring filter that was not being caught by the scanned, giving so false positives.

Code analysis during Runtime. So code is not being uploaded . Also there is no limit to lines of Cod

Comentarios: Its super agile. Instant code inspection.

Puntos a favor:

There are 12 Security Standards. Sonarqube only offers 2. Code does not get uploaded in the cloud.Only the report does. Its quick to start.Best suited for QA. No need for any additional software for setup. Setup for Sonarquebe is tedious.

Puntos en contra:

Its not in Gartner´s list of security tools.This makes it difficult to convince prospective clients for making a purchase.

What a beautiful discovery!

Comentarios: This product helps us to improve quality of our software.

Puntos a favor:

It finds many defects in your code. It helps you to fix defects with clear explanations.

Puntos en contra:

Applications and portfolio configuration isn't user friendly.

Kiuwan Code Security

Comentarios: We have helped our customers to identify problems in their source code, build an efficient solution path and implement the tasks to solve problems using the Kiuwan Code Security product.

Puntos a favor:

- great summary and overview - easy to mark false positives - good scanner, many supported langauges

Puntos en contra:

- local analyzer should always be used but this is not mentioned in the documentation

It needs to evolve towards a more focused view of the security review

Puntos a favor:

Quick and easy to use, it is comfortable and efficient

Puntos en contra:

It is very devotional oriented, so it is not flexible to extract full reports of results, where all the information jumps. The governance module is very powerful but it is complicated to do some information filtering.

Kiuwan Code Security review

Comentarios: We have reduced the technical debt in less than 2 years significantly

Puntos a favor:

Visibility of code quality at the management level. We have reduced the technical debt in less than 2 .years significantly

Puntos en contra:

We have reduced the technical debt in less than 2 years significantly

Usefull for big all king of projects

Puntos a favor:

We use Kiuwan for all of our projects and it help us to verify and increase the quality of our code.

Puntos en contra:

It would be nice if Angular project could be analysed.

Incredible functionality

Puntos a favor:

The software gives you feedback about the code that is susceptible for a improvement.

Puntos en contra:

Sometimes it takes a lot of time to load the software

Code analysis for everything

Puntos a favor:

The quick support The functionality The dashboard The integration with Github

Puntos en contra:

No support for GOLANG No support for Slack The price

Great to control the quality of our deployments

Comentarios: Kiuwan is letting us controlling th quality of the different versions our vendors implement

Puntos a favor:

Everything can be configured according with our needs

Puntos en contra:

It requires a little bit deep knowledge to customize some configurations

Kiuwan is Amazing in Code Analysis

Comentarios: Company where I work has many projects with large numbers of code, Kiuwan allowed to improve the quality of it

Puntos a favor:

Easy to use Deep code analysis Very fast Report of results easy to understand

Puntos en contra:

No cons in kiuwan use, we are very happy whith it