We performed a comparison between Fortify WebInspect and Kiuwan based on real PeerSpot user reviews.
Find out in this report how the two Dynamic Application Security Testing (DAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It's a well-known platform for doing dynamic application scanning."
"Technical support has been good."
"It is scalable and very easy to use."
"Fortify WebInspect is a scalable solution, it is good for a lot of applications."
"The user interface is ok and it is very simple to use."
"Good at scanning and finding vulnerabilities."
"There are lots of small settings and tools, like an HTTP editor, that are very useful."
"The accuracy of its scans is great."
"We use Kiuwan to locate the source of application vulnerabilities."
"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."
"Software analytics for a lot of different languages including ABAP."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"The solution has a continuous integration process."
"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."
"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."
"Lately, we've seen more false negatives."
"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."
"One thing I would like to see them introduce is a cloud-based platform."
"We have often encountered scanning errors."
"A localized version, for example, in Korean would be a big improvement to this solution."
"The initial setup was complex."
"DIfferent languages, such Spanish, Portuguese, and so on."
"I would like to see better integration with the Visual Studio and Eclipse IDEs."
"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."
"Integration of the programming tools could be improved."
"Perhaps more languages supported."
"I would like to see additional languages supported."
"The product's UI has certain shortcomings, where improvements are required."
"I would like to see better integration with Azure DevOps in the next release of this solution."
Fortify WebInspect is ranked 2nd in Dynamic Application Security Testing (DAST) with 17 reviews while Kiuwan is ranked 21st in Application Security Tools with 23 reviews. Fortify WebInspect is rated 7.0, while Kiuwan is rated 8.6. The top reviewer of Fortify WebInspect writes "A powerful tool catering to multiple use cases that provides reasonably good technical support". On the other hand, the top reviewer of Kiuwan writes "Though a stable tool, the UI needs improvement". Fortify WebInspect is most compared with PortSwigger Burp Suite Professional, Fortify on Demand, Acunetix, OWASP Zap and HCL AppScan, whereas Kiuwan is most compared with SonarQube, Checkmarx One, Snyk, Veracode and Fortify on Demand. See our Fortify WebInspect vs. Kiuwan report.
We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.