Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Kiuwan comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Vulnerability Management (24th), Static Code Analysis (3rd), API Security (5th), DevSecOps (4th), Risk-Based Vulnerability Management (9th)
Kiuwan
Ranking in Application Security Tools
27th
Ranking in Static Application Security Testing (SAST)
26th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.0%, down from 14.5% compared to the previous year. The mindshare of Kiuwan is 1.1%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
Mustufa Bhavnagarwala - PeerSpot reviewer
Though a stable tool, the UI needs improvement
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It can integrate very well with DAST solutions. So both of them are combined into an integrated solution for customers running application security."
"Less false positive errors as compared to any other solution."
"The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal."
"The most valuable features of Checkmarx are the Best Fix Location and the Payments option because you can save a lot of time trying to mitigate the configuration. Using these tools can save you a lot of time."
"It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."
"I have seen a return on investment from Checkmarx One."
"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."
"Most valuable features include: ease of use, dashboard. interface and the ability to report."
"The solution has a continuous integration process."
"Software analytics for a lot of different languages including ABAP."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"The solution offers very good technical support."
"​We use Kiuwan to locate the source of application vulnerabilities."
"I have found the security and QA in the source code to be most valuable."
"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."
 

Cons

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."
"Some of the descriptions were found to be missing or were not as elaborate as compared to other descriptions. Although, they could be found across various standard sources but it would save a lot of time for developers, if this was fixed."
"Checkmarx needs to improve the false positives and provide more accuracy in identifying vulnerabilities. It misses important vulnerabilities."
"Checkmarx is not good because it has too many false positive issues."
"Checkmarx could be improved with more integration with third-party software."
"Implementing a blackout time for any user or teams: Needs improvement."
"The validation process needs to be sped up."
"This product requires you to create your own rulesets. You have to do a lot of customization."
"The development-to-delivery phase."
"It could improve its scalability abilities."
"The QA developer and security could be improved."
"I would like to see additional languages supported."
"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."
"Integration of the programming tools could be improved."
"Perhaps more languages supported."
"The next release should include more flexibility in the reporting."
 

Pricing and Cost Advice

"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"For around 250 users or committers, the cost is approximately $500,000."
"The pricing was not very good. This is just a framework which shouldn’t cost so much."
"The solution is costly."
"It is not expensive, but sometimes, their pricing model or licensing model is not very clear. There are similar variables, such as projects or developers, and sometimes, it is a little bit confusing."
"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
"The interface used to create custom rules comes at an additional cost."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"Nothing special. It's a very fair model."
"It follows a subscription model. I think the price is somewhere in the middle."
"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"This solution is cheaper than other tools."
"The price of Kiuwan is lower than that of other tools on the market."
"Kiuwan is an open-source solution and free to use."
"Check with your account manager."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
Computer Software Company
17%
Financial Services Firm
11%
Manufacturing Company
7%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about Kiuwan?
The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.
What is your experience regarding pricing and costs for Kiuwan?
I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...
What needs improvement with Kiuwan?
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Find out what your peers are saying about Checkmarx One vs. Kiuwan and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.