CodeSonar vs Kiuwan comparison

CodeSecure and Kiuwan are both solutions in the Application Security Tools category. CodeSecure is ranked #28, while Kiuwan is ranked #29. CodeSecure holds a 1.2% mindshare in AS, compared to Kiuwan’s 1.1% mindshare. Additionally, 87% of CodeSecure users are willing to recommend the solution, compared to 93% of Kiuwan users who would recommend it.

CodeSonar

Read 7 CodeSonar reviews

2,608 Views
1,800 Comparison Views

87% willing to recommend

Kiuwan

Read 23 Kiuwan reviews

1,808 Views
1,464 Comparison Views

93% willing to recommend

CodeSonar

Kiuwan

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Kiuwan and CodeSonar are competing tools in the code analysis category. User feedback suggests that Kiuwan's competitive pricing and responsive support give it an edge, whereas CodeSonar's superior functionality and extensive features make it a preferred choice for those who need more comprehensive capabilities.

Features: Kiuwan provides continuous code quality analysis, detects security vulnerabilities, and offers a flexible pricing structure. CodeSonar is recognized for its comprehensive static analysis, strong security assessment, and advanced error detection features that distinguish it in the market.

Room for Improvement: Kiuwan users recommend improving its integration with a wider range of development environments. They also see room for enhancing its analysis depth to compete with more powerful tools like CodeSonar. CodeSonar users suggest simplifying its learning curve with enhanced onboarding resources. They also wish for a more streamlined user interface and faster initial setup.

Ease of Deployment and Customer Service: Kiuwan has a quick and straightforward deployment process, gaining praise for its supportive customer service. CodeSonar, while having a complex deployment, balances it with highly effective support services that improve user satisfaction over time.

Pricing and ROI: Kiuwan is known for lower setup costs and a quicker ROI, often due to its accessible pricing structure. CodeSonar's higher initial investment is offset by its robust capabilities, providing long-term benefits that justify its ROI.

To learn more, read our detailed CodeSonar vs. Kiuwan Report (Updated: December 2025).

Buyer's Guide

CodeSonar vs. Kiuwan

December 2025

Download the complete report

Helped 879,889 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

28th

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (11th)

Kiuwan

Ranking in Application Security Tools

29th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (25th)

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of CodeSonar is 1.2%, up from 1.2% compared to the previous year. The mindshare of Kiuwan is 1.1%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Market Share Distribution
Product	Market Share (%)
CodeSonar	1.2%
Kiuwan	1.1%
Other	97.7%

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Anshul Anshul

Sr. Manager at a tech services company with 10,001+ employees

Efficient and accurate scanning, and detailed analysis

In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further. Another issue I've encountered is that Kiuwan only looks at the version of components and doesn't take into account any workaround fixes that have been implemented at the code level. This can result in false positives being reported. Additionally, these issues are in the "insights" tab and not in the code base security aspect. Lastly, when muting findings that are false positives, there should be an option to see the only available at the code level rather than at the organization level because it can lead to missing vulnerabilities if they are muted at the org level. An additional feature that would be helpful is the ability to easily download reports from Kiuwan. Specifically, in the "insights" tab, we have been encountering an error when trying to download the PDF report. We are able to download the code-based security report, but not the insights report. This has been an ongoing issue for the past couple of months and would be beneficial if it could be resolved. My main recommendation would be to address the issues with downloading reports that we have been experiencing. Additionally, it would be helpful if Kiuwan could support a wider range of programming languages, as there are currently some that are not compatible with the tool. If the code of a particular application falls under the category which is not compatible with Kiuwan, then it will not be able to scan it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool is very good for detecting memory leaks."

"It has been able to scale."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"There is nice functionality for code surfing and browsing."

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"CodeSonar’s most valuable feature is finding security threats."

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"I've tried many open source applications and the remediation or correction actions that were provided by Kiuwan were very good in comparison."

"The solution offers very good technical support."

"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."

"I've found the reporting features the most helpful."

"We use Kiuwan to locate the source of application vulnerabilities."

"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."

"The solution has a continuous integration process."

More Kiuwan pros

Cons

"It would be beneficial for the solution to include code standards and additional functionality for security."

"There could be a shared licensing model for the users."

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"It was expensive."

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"The scanning tool for core architecture could be improved."

"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."

"The product's UI has certain shortcomings, where improvements are required."

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."

"The development-to-delivery phase."

"The QA developer and security could be improved."

"It could improve its scalability abilities."

"The next release should include more flexibility in the reporting."

More Kiuwan cons

Pricing and Cost Advice

"Pricing is a bit costly."

"Our organization purchased a license to use the solution."

"The solution's price depends on the number of licenses needed and the source code for the project."

"The application’s pricing is high compared to other tools."

"The price of Kiuwan is lower than that of other tools on the market."

"This solution is cheaper than other tools."

"Nothing special. It's a very fair model."

"It follows a subscription model. I think the price is somewhere in the middle."

"Check with your account manager."

"Kiuwan is an open-source solution and free to use."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

879,889 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

25%

University

12%

Computer Software Company

Financial Services Firm

Computer Software Company

13%

University

10%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	4
Large Enterprise	6

Comparisons

SonarQube vs CodeSonar

Compared 34% of the time

Coverity Static vs CodeSonar

Compared 22% of the time

Polyspace Code Prover vs CodeSonar

Compared 7% of the time

Helix QAC vs CodeSonar

Compared 4% of the time

OpenText Static Application Security Testing vs CodeSonar

Compared 4% of the time

More CodeSonar Competitors

SonarQube vs Kiuwan

Compared 36% of the time

Checkmarx One vs Kiuwan

Compared 10% of the time

Veracode vs Kiuwan

Compared 8% of the time

Snyk vs Kiuwan

Compared 8% of the time

GitHub vs Kiuwan

Compared 6% of the time

More Kiuwan Competitors

Product Reports

Buyer's Guide

Application Security Tools

January 2026

Download CodeSonar product report

Buyer's Guide

Kiuwan

January 2026

Download Kiuwan product report

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Kiuwan

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

Buyer's Guide

CodeSonar vs. Kiuwan

December 2025

Free Report: CodeSonar vs. Kiuwan

Find out what your peers are saying about CodeSonar vs. Kiuwan and other solutions. Updated: December 2025.

DOWNLOAD NOW

879,889 professionals have used our research since 2012.

See our CodeSonar vs. Kiuwan report.

See our list of best Application Security Tools vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.