Try our new research platform with insights from 80,000+ expert users

Kiuwan vs w3af comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kiuwan
Ranking in Application Security Tools
28th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
Static Application Security Testing (SAST) (26th)
w3af
Ranking in Application Security Tools
39th
Average Rating
8.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Application Security Tools category, the mindshare of Kiuwan is 1.2%, up from 1.1% compared to the previous year. The mindshare of w3af is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Kiuwan1.2%
w3af0.6%
Other98.2%
Application Security Tools
 

Featured Reviews

Mustufa Bhavnagarwala - PeerSpot reviewer
CyberRisk Solution Advisor at a consultancy with 10,001+ employees
Though a stable tool, the UI needs improvement
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.
OS
Information Security Advisor, CISO & CIO, Docutek Services at Docutek Services
It's buggy and seems to try to do too many things, but having this on a USB drive has been valuable.
I tried to install this on numerous systems and eventually, with help, I got it running. It needs far too many dependencies installed and there's too much messing about to be of much use. Once running, it's buggy and begs the question can it be relied upon? Even within Kali it reports website time-outs, yet Zap or Burp are able to do a successful scan. I wanted this to work so much and be able to use it as an additional check of my results but have now binned it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."
"Saving time and money by automatically identifying problems is unbelievable."
"In our digital marketing efforts, our app is in continuous integration and having introduced this tool ensures we are always delivering safe code."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"I've found the reporting features the most helpful."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"We switched because Kiuwan covers the entire SDLC; provides direct information to act upon, for the developer, architects, QA, CIO and CISO, in a few seconds; automatically, fully integrated in any CI/CD setup."
"I advise using Kiuwan because it's very straightforward and totally easy to understand."
"The best free software for pen testing web applications."
 

Cons

"The solution seems to give us a lot of false positives."
"Different languages, such Spanish, Portuguese, and so on."
"Improvement could be made with the integration of the programming tools."
"The QA developer and security could be improved."
"More languages and frameworks would enhance this tool."
"The QA developer and security could be improved."
"We faced a lot of problems with the initial setup and support gave us difficulties around the installation."
"I would like to see additional languages supported."
"Unfortunately, once you get around the seemingly strict set of pre-requisites to install it, it is incredibly buggy."
 

Pricing and Cost Advice

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"Nothing special. It's a very fair model."
"It follows a subscription model. I think the price is somewhere in the middle."
"This solution is cheaper than other tools."
"Check with your account manager."
"Kiuwan is an open-source solution and free to use."
"The price of Kiuwan is lower than that of other tools on the market."
Information not available
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
885,286 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise4
Large Enterprise6
No data available
 

Comparisons

 

Overview

 

Sample Customers

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: February 2026.
885,286 professionals have used our research since 2012.