We performed a comparison between Kiuwan and SonarQube based on real PeerSpot user reviews.
Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."
"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."
"I've found the reporting features the most helpful."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"I have found the security and QA in the source code to be most valuable."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"We use Kiuwan to locate the source of application vulnerabilities."
"It is an easy tool that you can deploy and configure. After that you can measure the history of your obligation and integrate it with other tools like GitLab or GitHub or Azure DevOps to do quality code analysis."
"This solution is simple to use and can be quickly deployed."
"Before you even compile, it can catch known vulnerability issues or patterns."
"It is very good at identifying technical debt."
"It provides you with many features, as it does with the premium model, but there are still extra features that can be purchased if needed."
"Using SonarQube has helped us to identify areas of technical debt to work on, resulting in better code, fewer vulnerabilities, and fewer bugs."
"I like that it covers most programming languages for source code review."
"It provides the security that is required from a solution for financial businesses."
"The next release should include more flexibility in the reporting."
"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."
"The development-to-delivery phase."
"Integration of the programming tools could be improved."
"I would like to see additional languages supported."
"DIfferent languages, such Spanish, Portuguese, and so on."
"The QA developer and security could be improved."
"Perhaps more languages supported."
"We found a solution with dynamic testing, and are looking to find a solution that can be used for both types of testing."
"We called support and complained but have not received any information as we use the free version. We had to fix it on our own and could not escalate it to the tool's developer."
"The product must improve security analysis."
"If you don't have any experience with the configuration or how to configure the files, it can be complicated."
"A better design of the interface and add some new rules."
"There could be better integration with other products."
"The interface could be a little better and should be enhanced."
"During the setup process, we only had one issue related to the number of available files. To perform the analysis, you have quite a lot of available file handles, so we had to increase that limit."
Kiuwan is ranked 21st in Application Security Tools with 23 reviews while SonarQube is ranked 1st in Application Security Tools with 108 reviews. Kiuwan is rated 8.6, while SonarQube is rated 8.0. The top reviewer of Kiuwan writes "Though a stable tool, the UI needs improvement". On the other hand, the top reviewer of SonarQube writes "Easy to integrate and has a plug-in that supports both C and C++ languages". Kiuwan is most compared with Checkmarx, Fortify on Demand, Veracode, Snyk and SonarCloud, whereas SonarQube is most compared with Checkmarx, SonarCloud, Coverity, Veracode and Snyk. See our Kiuwan vs. SonarQube report.
See our list of best Application Security Tools vendors and best Application Security Testing (AST) vendors.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.