We performed a comparison between Kiuwan and SonarQube based on real PeerSpot user reviews.
Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."I have found the security and QA in the source code to be most valuable."
"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."
"It provides value by offering options to enhance both code quality and the security of the company."
"The solution has a continuous integration process."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"Software analytics for a lot of different languages including ABAP."
"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."
"I like that it's easy to navigate not just in terms of code findings but you can actually see them in the context of your source code because it gives you a copy of your code with the items that it found and highlights them. You can see it directly in your code, so you can easily go back and make the corrections in the code. It basically finds the problems for you and tells you where they are."
"The most valuable features are the wide array of languages, multiple languages per project, the breakdown of bugs, and the description of vulnerabilities and code smells (best practices)."
"SonarQube is scalable. My company has 50 users."
"There is a free version."
"We consider it a handy tool that helps to resolve our issues immediately."
"The most valuable function is its usability."
"It provides you with many features, as it does with the premium model, but there are still extra features that can be purchased if needed."
"The most valuable features are code scanning and Quality Gates."
"I would like to see better integration with the Visual Studio and Eclipse IDEs."
"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."
"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."
"The solution seems to give us a lot of false positives. This could be improved quite a bit."
"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."
"Perhaps more languages supported."
"The next release should include more flexibility in the reporting."
"It could improve its scalability abilities."
"If you don't have any experience with the configuration or how to configure the files, it can be complicated."
"SonarQube could improve its static application security testing as per the industry standard."
"I would also like SonarQube to be able to write custom scanning rules. More documentation would be helpful as well because some of our guys were struggling with the customization script."
"We had some issues where the Quality Gate check sometimes gets stuck and it is unclear."
"Dynamic scanning is missing and there are some issues with security scanning."
"I would like to see dynamic code analysis in the next version of the software."
"SonarQube is not development-centric like Snyk."
"Although it has Sonar built into it, it is still lacking. Customization features of identifying a particular attack still need to be worked on. To give you an example: if we want to scan and do a false positive analysis, those types of features are missing. If we want to rescan something from a particular point that is a feature that is also missing. It’s in our queue. That will hopefully save a lot of time."
Kiuwan is ranked 21st in Application Security Tools with 23 reviews while SonarQube is ranked 1st in Application Security Tools with 108 reviews. Kiuwan is rated 8.6, while SonarQube is rated 8.0. The top reviewer of Kiuwan writes "Though a stable tool, the UI needs improvement". On the other hand, the top reviewer of SonarQube writes "Easy to integrate and has a plug-in that supports both C and C++ languages". Kiuwan is most compared with Checkmarx One, Veracode, Snyk, Fortify on Demand and SonarCloud, whereas SonarQube is most compared with Checkmarx One, SonarCloud, Coverity, Veracode and Snyk. See our Kiuwan vs. SonarQube report.
See our list of best Application Security Tools vendors and best Application Security Testing (AST) vendors.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
