No more typing reviews! Try our Samantha, our new voice AI agent.

Kiuwan vs Veracode comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kiuwan
Ranking in Application Security Tools
34th
Ranking in Static Application Security Testing (SAST)
29th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
No ranking in other categories
Veracode
Ranking in Application Security Tools
3rd
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Container Security (13th), Software Composition Analysis (SCA) (2nd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (3rd)
 

Mindshare comparison

As of September 2026, in the Application Security Tools category, the mindshare of Kiuwan is 1.1%, up from 1.1% compared to the previous year. The mindshare of Veracode is 4.1%, down from 8.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Veracode4.1%
Kiuwan1.1%
Other94.8%
Application Security Tools
 

Featured Reviews

Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Though a stable tool, the UI needs improvement
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.
reviewer2753535 - PeerSpot reviewer
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
Integrates security into the development process and improves team collaboration
Veracode helps organizations develop software by reducing the risk of security vulnerabilities through developer enablement and applications focused on governance. You can utilize different levels of processes to achieve better performance or a more scalable service. Since I started working with it in 2022, I’ve found it to be cost-effective as well. Overall, Veracode is a user-friendly security tool. It includes features such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). During the development phase, we can identify vulnerabilities in the application. This process occurs in the staging environment during development. When we're ready to go to production, we conduct a final check. Essentially, this tool helps identify vulnerabilities during the code development stage, including both high-level vulnerabilities and those related to open-source software composition. We utilize specific methodologies for this purpose. Additionally, it offers a feature that allows us to set up policies based on client requirements. This means we can customize the tool to meet the specific needs of our clients, ensuring that they receive the appropriate level of security in their applications. Veracode is user-friendly as well. Compared to other tools, their scans take 15 minutes or under. If you have a large scale of libraries or data, it might take longer, but based on my personal experience, the scan usually runs within fifteen minutes. For my case study using the Veracode tool, I worked on an internal project following industry standards. We used Veracode to improve our security posture and speed up the time to market by streamlining the development process. This enhanced collaboration between developers, operations, and security teams. The automated scanning process helped identify and fix vulnerabilities earlier in the development process. We maintained compliance with regulatory requirements, avoided fines, and built customer trust by integrating security into the development process. When we conduct this scan, we receive data on a list of vulnerabilities. This information improved our communication and increased transparency, which leads to better reports about the efforts being put in. This results in a more effective and efficient collaboration process, making it user-friendly for all involved. When considering costs, if we resort to manual processes, it can be time-consuming. Therefore, we utilize automated scans to identify and fix security issues. This allows us to address vulnerabilities early in the development process, as we discussed previously. This applies both to our in-house code and third-party libraries, using Software Composition Analysis (SCA) agent-based scans. In the future, we will also implement SCA agent-based scans as a separate feature within Veracode, which can help organizations avoid the expensive and time-consuming consequences of security issues. Furthermore, we have seen an increase in compliance, helping to maintain adherence to regulatory requirements and industry standards, thereby avoiding fines and reputational damage associated with noncompliance. Additionally, by integrating security into the development process, we enhance customer trust in our organization and its products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have been using this solution for one and a half years."
"This solution helps us to catch issues early on, and find problems that we never knew we had."
"The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report."
"Software analytics for a lot of different languages including ABAP."
"For the moment, this is a solution that I could recommend."
"I've tried many open source applications and the remediation or correction actions that were provided by Kiuwan were very good in comparison."
"Customer service is excellent."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"Before Veracode, the application was deployed to the production server and there would be a lot of bugs and issues. Once we implemented the Veracode scan, the full deployment issues were drastically reduced."
"The most valuable feature of Veracode is the binary scan feature for auditing, which allows us to audit the software without the source code."
"It does software composition analysis, discovering open source software weaknesses."
"Veracode provides faster scans compared to other static analysis security testing tools."
"One benefit is that we have automated the scanning process."
"The most valuable feature is the security and vulnerability parts of the solution. It shows medium to high vulnerabilities so we can find them, then upgrade our model before it is too late. It is useful because it automates security. Also, it makes things more efficient. So, there is no need for the security team to scan every time. The application team can update it whenever possible in development."
"The automation of Veracode is great because we no longer have to run manual testing."
"Code scanning is the most valuable feature."
 

Cons

"The configuration hasn't been that good."
"I would like to see additional languages supported."
"It could improve its scalability abilities."
"The QA developer and security could be improved."
"The next release should include more flexibility in the reporting."
"DIfferent languages, such Spanish, Portuguese, and so on."
"The development-to-delivery phase."
"I would like to see better integration with Azure DevOps in the next release of this solution."
"Veracode can be slow at times and has room for improvement, which may cause delays in our products and prolonged static scans."
"When we scan binary, when we perform binary analysis, it could go faster."
"It's been over a year since I used the product. But when I did, I found there were too many false positives."
"Veracode can be improved with more integrations, more automations, enhanced API features, and more advanced analytics."
"My advice for anybody who is interested in implementing this solution is to ensure that your technology is actually supported because the coverage is quite patchy."
"Improving sorting through findings reports to filter by only what is critically relevant will help developers focus on issues."
"We have not had much free expert support from the vendor. We have had to have a team of highly skilled individuals to make the solution work."
"I would love to be able to do a dynamic sandbox scan."
 

Pricing and Cost Advice

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"The price of Kiuwan is lower than that of other tools on the market."
"It follows a subscription model. I think the price is somewhere in the middle."
"Nothing special. It's a very fair model."
"Kiuwan is an open-source solution and free to use."
"Check with your account manager."
"This solution is cheaper than other tools."
"We pay based on the number of developers working on a particular project."
"I believe the price is fair according to market standards."
"Veracode is costly. They have different license models for different customers. What we had was based on the amount of code that has been analyzed. The license that we had was capped to a certain amount, for example, 5 Gig. There would be an extra charge for anything above 5 Gig."
"Veracode provides value for the cost, with no additional charges apart from the standard licensing fee."
"If you're licensing, and you're looking at licensing models, you might want to ask Veracode about their microservice, depending on the company. If you are a microservice architecture, I would suggest asking them about their microservice pricing. I would suggest that you evaluate that with your code and their other licensing model, which is like a lump sum in size of artifacts, and just make sure that you price that out with them, because there might be some tradeoffs that can be made in price."
"Veracode is expensive. But the solution is worth it."
"The cost of Veracode is high."
"The pricing for Veracode is high, making it difficult for beginners to afford."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
914,109 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
University
10%
Manufacturing Company
9%
Financial Services Firm
7%
Financial Services Firm
14%
Manufacturing Company
11%
Outsourcing Company
9%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise4
Large Enterprise6
By reviewers
Company SizeCount
Small Business70
Midsize Enterprise46
Large Enterprise114
 

Questions from the Community

Ask a question
Earn 20 points
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What is the biggest difference between Veracode and Checkmarx?
According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Comparisons

 

Also Known As

No data available
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Kiuwan vs. Veracode and other solutions. Updated: September 2026.
914,109 professionals have used our research since 2012.