Try our new research platform with insights from 80,000+ expert users

GitHub Advanced Security vs Kiuwan comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitHub Advanced Security
Ranking in Application Security Tools
6th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Kiuwan
Ranking in Application Security Tools
29th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
Static Application Security Testing (SAST) (25th)
 

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of GitHub Advanced Security is 4.9%, down from 7.6% compared to the previous year. The mindshare of Kiuwan is 1.1%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
GitHub Advanced Security4.9%
Kiuwan1.1%
Other94.0%
Application Security Tools
 

Featured Reviews

Sabna Sainudeen - PeerSpot reviewer
Director, Application Security at Carlsberg
Seamlessly integrates into developer environment for streamlined code scanning
GitHub Advanced Security should look into API security issues, which they currently do not. Additionally, open-source security vulnerabilities are not getting updated in a timely manner. There are features in GitHub Advanced Security that cannot be used within Microsoft, which is strange since they are the same company. It should also focus on developing a software bill of materials (SBOM) to see all open software used in one place.
Anshul Anshul - PeerSpot reviewer
Sr. Manager at a tech services company with 10,001+ employees
Efficient and accurate scanning, and detailed analysis
In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further. Another issue I've encountered is that Kiuwan only looks at the version of components and doesn't take into account any workaround fixes that have been implemented at the code level. This can result in false positives being reported. Additionally, these issues are in the "insights" tab and not in the code base security aspect. Lastly, when muting findings that are false positives, there should be an option to see the only available at the code level rather than at the organization level because it can lead to missing vulnerabilities if they are muted at the org level. An additional feature that would be helpful is the ability to easily download reports from Kiuwan. Specifically, in the "insights" tab, we have been encountering an error when trying to download the PDF report. We are able to download the code-based security report, but not the insights report. This has been an ongoing issue for the past couple of months and would be beneficial if it could be resolved. My main recommendation would be to address the issues with downloading reports that we have been experiencing. Additionally, it would be helpful if Kiuwan could support a wider range of programming languages, as there are currently some that are not compatible with the tool. If the code of a particular application falls under the category which is not compatible with Kiuwan, then it will not be able to scan it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best features of GitHub Advanced Security are its flexibility and the multiple options it has compared to other tools."
"Dependency scanning is a valuable feature."
"GitHub Advanced Security is a very developer-friendly solution that is integrated within my development environment."
"The most valuable is the developer experience and the extensibility of the overall ecosystem."
"GitHub Advanced Security is ten out of ten scalable."
"GitHub Advanced Security's secret scanning is good."
"The initial setup was straightforward and completed in a matter of minutes."
"It ensures user passwords or sensitive information are not accidentally exposed in code or reports."
"Software analytics for a lot of different languages including ABAP."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"The solution has a continuous integration process."
"I've found the reporting features the most helpful."
"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."
"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."
"It provides value by offering options to enhance both code quality and the security of the company."
 

Cons

"There could be a centralized dashboard to view reports of all the projects on one platform."
"GitHub Advanced Security should look into API security issues, which they currently do not. Additionally, open-source security vulnerabilities are not getting updated in a timely manner."
"There could be DST features included in the product."
"An area of GitHub Advanced Security that has room for improvement is customization."
"The deployment part of the product is an area of concern that needs to be made easier from an improvement perspective."
"The reporting feature might need improvement. While it integrates seamlessly with my workflow, it doesn't provide management with oversight, such as statistics and the number of vulnerabilities."
"For GitHub Advanced Security, I would like to see more support for various programming languages."
"Open-source security vulnerabilities are not getting updated in a timely manner."
"The configuration hasn't been that good."
"The solution seems to give us a lot of false positives. This could be improved quite a bit."
"DIfferent languages, such Spanish, Portuguese, and so on."
"I would like to see additional languages supported."
"I would like to see better integration with Azure DevOps in the next release of this solution."
"The next release should include more flexibility in the reporting."
"Integration of the programming tools could be improved."
"The product's UI has certain shortcomings, where improvements are required."
 

Pricing and Cost Advice

"The solution is expensive."
"The current licensing model, which relies on active commitments, poses challenges, particularly in predicting and managing growth."
"Nothing special. It's a very fair model."
"This solution is cheaper than other tools."
"Kiuwan is an open-source solution and free to use."
"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"The price of Kiuwan is lower than that of other tools on the market."
"It follows a subscription model. I think the price is somewhere in the middle."
"Check with your account manager."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
879,889 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
8%
Government
7%
Computer Software Company
13%
University
10%
Financial Services Firm
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise4
Large Enterprise7
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise4
Large Enterprise6
 

Questions from the Community

What do you like most about GitHub Advanced Security?
It is a stable solution...It is a scalable solution as it can handle new applications along with the analysis part.
What needs improvement with GitHub Advanced Security?
We used additional third-party solutions, but we replaced them with GitHub Advanced Security, even though I do not have a very good opinion about GitHub Advanced Security. Even though it is an inli...
What is your primary use case for GitHub Advanced Security?
I'm working with software development nowadays. As a process, we are using the dependent bot alerts and the code scanning for Java, and some of the code scanning is happening. Security secrets in c...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Find out what your peers are saying about GitHub Advanced Security vs. Kiuwan and other solutions. Updated: December 2025.
879,889 professionals have used our research since 2012.