Try our new research platform with insights from 80,000+ expert users

Kiuwan vs OpenText Dynamic Application Security Testing comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kiuwan
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
Application Security Tools (29th), Static Application Security Testing (SAST) (26th)
OpenText Dynamic Applicatio...
Average Rating
7.2
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Dynamic Application Security Testing (DAST) (3rd), DevSecOps (9th)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Kiuwan is designed for Application Security Tools and holds a mindshare of 1.2%, up 1.0% compared to last year.
OpenText Dynamic Application Security Testing, on the other hand, focuses on Dynamic Application Security Testing (DAST), holds 11.0% mindshare, up 9.5% since last year.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Kiuwan1.2%
SonarQube16.9%
Checkmarx One9.9%
Other72.0%
Application Security Tools
Dynamic Application Security Testing (DAST) Market Share Distribution
ProductMarket Share (%)
OpenText Dynamic Application Security Testing11.0%
Veracode18.2%
Checkmarx One17.0%
Other53.8%
Dynamic Application Security Testing (DAST)
 

Featured Reviews

Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Though a stable tool, the UI needs improvement
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.
AP
Cyber Security Consultant at a tech vendor with 10,001+ employees
Enhancements in manual testing align with reporting and integration features
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produces minimal findings, necessitating manual verification. The solution offers customization features for crawling and vulnerability detection. It includes various security frameworks and allows selection of specific vulnerability types to audit, such as OWASP Top 10 or JavaScript-based vulnerabilities. When working with APIs, we can select OWASP API Top 10. The tool also supports custom audit features by combining different security frameworks. For on-premises deployment, the setup is complex, particularly regarding SQL server configuration. Unlike Burp Suite or OpenText Dynamic Application Security Testing, which have simpler setup processes, WebInspect requires SQL server setup to function.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Software analytics for a lot of different languages including ABAP."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."
"​We use Kiuwan to locate the source of application vulnerabilities."
"The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report."
"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"I have found the security and QA in the source code to be most valuable."
"The transaction recorder within WebInspect is easy to use, which is valuable for our team."
"I'm sorry, but there is no review content provided to extract a quote from."
"Fortify WebInspect is a scalable solution, it is good for a lot of applications."
"The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received."
"Guided Scan option allows us to easily scan and share reports."
"The solution's technical support was very helpful."
"The solution is able to detect a wide range of vulnerabilities. It's better at it than other products."
"Technical support has been good."
 

Cons

"Perhaps more languages supported."
"Integration of the programming tools could be improved."
"The development-to-delivery phase."
"The next release should include more flexibility in the reporting."
"I would like to see better integration with the Visual Studio and Eclipse IDEs."
"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."
"It could improve its scalability abilities."
"The configuration hasn't been that good."
"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."
"It took us between eight and ten hours to scan an entire site, which is somewhat slow and something that I think can be improved."
"Creating reports is very slow and it is something that should be improved."
"One thing I would like to see them introduce is a cloud-based platform."
"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."
"Lately, we've seen more false negatives."
"I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them."
"The initial setup was complex."
 

Pricing and Cost Advice

"The price of Kiuwan is lower than that of other tools on the market."
"Check with your account manager."
"Kiuwan is an open-source solution and free to use."
"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"Nothing special. It's a very fair model."
"It follows a subscription model. I think the price is somewhere in the middle."
"This solution is cheaper than other tools."
"Fortify WebInspect is a very expensive product."
"The price is okay."
"This solution is very expensive."
"It’s a fair price for the solution."
"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."
"The pricing is not clear and while it is not high, it is difficult to understand."
"Our licensing is such that you can only run one scan at a time, which is inconvenient."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
University
10%
Financial Services Firm
7%
Consumer Goods Company
6%
Government
15%
Financial Services Firm
14%
Manufacturing Company
10%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise4
Large Enterprise6
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise15
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Fortify WebInspect?
While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...
What needs improvement with Fortify WebInspect?
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...
What is your primary use case for Fortify WebInspect?
I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...
 

Also Known As

No data available
Micro Focus WebInspect, WebInspect
 

Overview

 

Sample Customers

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Aaron's
Find out what your peers are saying about Kiuwan vs. OpenText Dynamic Application Security Testing and other solutions. Updated: May 2022.
881,733 professionals have used our research since 2012.