Kiuwan Reviews

Kiuwan is useful because it provides functions related to secure code review, source code review, detection of security vulnerabilities, and development of proper input validations to get proper output and coding to see if all the systems in our environment are properly used. Some SQL queries are written at the back end or at the server-side code, and the tool helps to check how they have been written. The tool helps us find if there is an issue, like whether an SQL injection attack has occurred in some SQL queries or not, meaning it helps deal with OWASP Top 10 vulnerabilities and some other vulnerabilities that a user can find through source code review. The tool also helps protect sensitive data, including passwords or encryption keys.

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

We use it to modify and enhance code across various aspects of our projects, particularly focusing on key data. The extent of modification varies and is influenced by the specific application and repository requirements.

The significance varies, and it is usually linked to the code's length. I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution. It offers comprehensive information, covering not only the basics but also delving into controllers, interfaces, and more.

I am utilizing Kiuwan for quick and efficient scans, specifically static scanning for web applications. This includes checking the application's code base and dependencies, known as SaaS scans. In the first quarter, there is a "code-based security and insight" tab where we can review the application's code for any vulnerabilities arising from dependencies. We then analyze these vulnerabilities and provide solutions for mitigating them.

The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me.

Kiuwan provides a detailed analysis and mitigation steps for any vulnerabilities reported, which is very helpful for teams in addressing the issues.

We use Kiuwan to assess the code, resolve issues, and showcase technical indicators. These indicators reveal the number of errors over a timeline and offer guidance on addressing issues related to business servers. We haven't integrated Kiuwan with additional tools; it operates as a standalone application and isn't integrated into the development life cycle.

It provides opportunities for improvement by guiding us toward better coding practices. It's a valuable learning tool, teaching developers about security concepts and ways to rectify various issues across different programming languages. 

I appreciate Kiuwan for its simplicity in establishing programming rules, especially with the Kiuwan client development tool. It allows programming rules by loading the code into the tool and using the DXPath and AST functionalities.

I develop use cases to enhance code quality, and in the event of code vulnerabilities, I guide the team on how to address and rectify them.

Our company produces a financial application, and we use Kiuwan for vulnerability testing. Kiuwan scans our code to detect some security issues. 

Kiuwan has enabled us to give our customers peace of mind through early identification of code vulnerabilities and remediation before delivery to the customer.

We use the solution for in-house development. In one of the cases, we use it for some applications that we need to create something from scratch. 

What we are considering more than anything else is maybe its quality of performance. We are looking for security vulnerabilities. I'm an Information Security Officer and that's why we are looking for vulnerabilities more than the quality of the code or the performance, however, it's great that it gives more detailed information about performance and the quality of the code. I'm actually looking to try another technology, to see if there's something we can do around static tests.

The solution is stable.

The solution is scalable.

I've tried many open source applications and the remediation or correction actions that were provided by Kiuwan were very good in comparison.

We analyze all the portfolio of applications from the customer. The customer is within the government of Spain. We analyze all their applications. On the portfolio of publications, we run analyses from all the applications.

From the tool itself, the developer can run an analysis with the same quality. With this tool, every developer has the opportunity to do an unlimited analysis.

The solution can scale well.

The solution offers very good technical support.

It's quite a stable product.