Try our new research platform with insights from 80,000+ expert users

Klocwork vs Qualys Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.9
Klocwork enhances efficiency and code quality, saving time and simplifying compliance, positively impacting organizational operations.
Sentiment score
5.5
Qualys Web Application Scanning improved visibility, reduced costs and failure rates, and increased ROI with automation, despite licensing challenges.
The main ROI factors include efficiency and how we meet compliance standards for various automotive requirements.
 

Customer Service

Sentiment score
7.3
Klocwork customer service is responsive and knowledgeable, offering efficient global support but needs better prioritization in ticket management.
Sentiment score
5.0
Qualys Web Application Scanning support is mostly praised for responsiveness, with minor concerns about higher-tier access and engagement.
The issue is not about the knowledge of the support but about the prioritization of the tickets they handle.
The customer support team is very responsive, proactive, and engages in conversations to ensure our needs are met.
During the initial phase, there was a need for follow-ups and clarifications.
Once we purchase the license, we have access to top-notch support.
I have dealt with Qualys's technical support, and any enhancements are challenging.
 

Scalability Issues

Sentiment score
7.2
Klocwork effectively supports diverse team sizes and projects with configurable options for static code analysis and scalability.
Sentiment score
7.7
Qualys Web Application Scanning is scalable, handling multiple licenses and users, though some issues arise with concurrent scans.
Klocwork supports our scalability needs without issues, even as project volumes increase.
The program-to-program enablement is scalable.
It is licensed for assets, so we just contact the team for additional licenses if needed.
At one point, there was a limitation on reporting for 100,000 assets at a time.
 

Stability Issues

Sentiment score
7.2
Klocwork is stable and reliable but requires high computing power and may face update and GUI challenges.
Sentiment score
8.5
Qualys Web Application Scanning is praised for stability and reliability, with users rating it highly and few issues reported.
Installation is easy, and the solution is stable.
 

Room For Improvement

Klocwork requires improvements in language support, dynamic analysis, integration, and flexibility, reducing false positives and enhancing user experience.
Qualys Web Application Scanning users seek improved XSS detection, simpler interface, better pricing, and enhanced integration features.
Klocwork should be able to analyze large codebases efficiently, supporting a desktop version for periodic small delta changes before pushing to the server.
We would like Klocwork to connect to Git and notify developers of issues tied to specific commits.
Klocwork sometimes provides too many additional warnings which require expertise to manage.
With the growing reliance on AI, Qualys Web Application Scanning should be updated to handle AI-based applications and LLM-based attacks.
I would like it to be cheaper because it is a bit expensive compared to competitors like Tenable Nessus.
One area of improvement is reducing false positives by prioritizing agent findings over remote findings when there is a corresponding local agent finding.
 

Setup Cost

Klocwork offers flexible enterprise pricing with varied license types, competitive costs, and suitability for different organization sizes and needs.
Qualys Web Application Scanning offers competitive pricing and flexible licensing, though some users seek improved cost-effectiveness.
It is less expensive than Coverity.
The solution is not very cheap, however, it is less expensive than Coverity.
Klocwork's pricing seems attractive, as it uses a per-user license model that does not have a lot of overhead.
They offer discounts on bulk licenses, making it cheaper compared to competitors like Veracode DAST.
I find it a bit expensive compared to other competitors.
 

Valuable Features

Klocwork improves code quality and development efficiency with advanced analysis features, CI/CD integration, and multi-language support.
Qualys Web Application Scanning offers Selenium integration, effective threat detection, and seamless CI/CD integration with a user-friendly interface.
Its integration with the CI/CD pipeline has helped streamline the software development process.
The most valuable feature of Klocwork is the static analysis tools, which help identify potential security threats and errors.
It takes just half a day to set up.
It effectively detects vulnerabilities like the OWASP Top 10 without any issues in reporting.
It is recognized as one of the best tools for web application security from a development perspective.
The product helps by providing options for remediating vulnerabilities it finds, making it really useful.
 

Categories and Ranking

Klocwork
Ranking in Application Security Tools
18th
Ranking in Static Application Security Testing (SAST)
16th
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
24
Ranking in other categories
Static Code Analysis (5th)
Qualys Web Application Scan...
Ranking in Application Security Tools
12th
Ranking in Static Application Security Testing (SAST)
8th
Average Rating
7.8
Reviews Sentiment
6.9
Number of Reviews
38
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Application Security Tools category, the mindshare of Klocwork is 1.4%, down from 1.4% compared to the previous year. The mindshare of Qualys Web Application Scanning is 2.1%, up from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

AnirbanSarkar - PeerSpot reviewer
Lets you find defects during the development phase, so you don't have to wait till the development is over to find and address flaws
What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity. What I'd like added in the next release of Klocwork is the peer code review Cahoots which used to be a part of Klocwork, and the architecture analysis and both have been taken out of Klocwork. I found the two critical for specific deployments, so if those can be brought back to Klocwork, that would be very good.
Kelvin Oladipo - PeerSpot reviewer
User-friendly scanning provides valuable vulnerability insights, but pricing improvements are needed
Qualys Web Application Scanning ( /products/qualys-web-application-scanning-reviews ) is user-friendly, easy to understand, easy to use, and easy to deploy. Credential scanning is very effective because it goes in-depth into the system, crawling the pages, and reporting on vulnerabilities. The product helps by providing options for remediating vulnerabilities it finds, making it really useful.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
857,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
24%
Manufacturing Company
22%
Computer Software Company
11%
Comms Service Provider
5%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Klocwork?
It's integrated into our CI, continuous integration.
What is your experience regarding pricing and costs for Klocwork?
Klocwork was competitively priced, making it a cost-effective solution for us.
What needs improvement with Klocwork?
We would like Klocwork to connect to Git and notify developers of issues tied to specific commits. Currently, this feature is absent, but we have suggested it to the team.
What do you like most about Qualys Web Application Scanning?
The vulnerability management feature is a strong one. And also the patch management feature.
What needs improvement with Qualys Web Application Scanning?
I would like it to be cheaper because it is a bit expensive compared to competitors like Tenable Nessus ( /products/tenable-nessus-reviews ). After using the product for a year, I might have more s...
 

Also Known As

No data available
Qualys WAS
 

Overview

 

Sample Customers

ACCESS Co Ltd, Risk-AI, Winbond Electronics, Bristol-Myers Squibb Pharmaceutical Research Institute, University of Southern California, Alebra Technologies, SIMULIA, Risk Management Solutions, Brigham Young University, SRD, HRL
BskyB, Cartagena, ClearPoint Learning Systems, Connect Group, du, Fortrex Technologies, HBOR, HDI, Highlights for Children, The Lithuanian State Enterprise Centre of Registers, City of Miami Beach, Microsoft, MidlandHR, MSCI Inc., Northern Arizona University, Ofgem, Olympus Europa, PhoneFactor, RTL Nederland, ThousandEyes, VGZ Organisatie B.V.
Find out what your peers are saying about Klocwork vs. Qualys Web Application Scanning and other solutions. Updated: June 2025.
857,028 professionals have used our research since 2012.