We performed a comparison between Kiuwan and SonarQube based on real PeerSpot user reviews.
Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"We use Kiuwan to locate the source of application vulnerabilities."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"The solution has a continuous integration process."
"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."
"It provides value by offering options to enhance both code quality and the security of the company."
"Provides local scanning for developers."
"The most valuable feature of this solution is that it is free."
"The SonarQube dashboard looks great."
"I like that it covers most programming languages for source code review."
"We've configured it to run on each commit, providing feedback on our software quality. ]"
"There's plenty of documentation available to users."
"We consider it a handy tool that helps to resolve our issues immediately."
"It has very good scalability and stability."
"I would like to see better integration with the Visual Studio and Eclipse IDEs."
"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."
"I would like to see additional languages supported."
"The QA developer and security could be improved."
"The next release should include more flexibility in the reporting."
"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."
"The development-to-delivery phase."
"DIfferent languages, such Spanish, Portuguese, and so on."
"In terms of what can be improved, the areas that need more attention in the solution are its architecture and development."
"The solution could improve by providing more advanced technologies."
"SonarQube is not development-centric like Snyk."
"I would like to see more options for security, beyond the basics like SQL injection."
"SonarQube could improve by adding automatic creation of tasks after scanning and more support for the Czech language."
"We're in the process of figuring out how to automate the workflow for QA audit controls on it. I think that's perhaps an area that we could use some buffing. We're a Kubernetes shop, so there are some things that aren't direct fits, which we're struggling with on the component Docker side. But nothing major."
"When we have a thousand products published over it, we expect it to be more efficient in terms of serving requests from the browser."
"The documentation is not clear and it needs to be updated."
Kiuwan is ranked 22nd in Application Security Tools with 23 reviews while SonarQube is ranked 1st in Application Security Tools with 112 reviews. Kiuwan is rated 8.6, while SonarQube is rated 8.0. The top reviewer of Kiuwan writes "Though a stable tool, the UI needs improvement". On the other hand, the top reviewer of SonarQube writes "Easy to integrate and has a plug-in that supports both C and C++ languages". Kiuwan is most compared with Checkmarx One, Snyk, Veracode, Fortify on Demand and SonarCloud, whereas SonarQube is most compared with Checkmarx One, SonarCloud, Coverity, Veracode and GitHub Advanced Security. See our Kiuwan vs. SonarQube report.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
