Kiuwan Competitors and Alternatives

What is most valuable?

* Dynamic analysis of on-premises applications using the Veracode proxy module. * Static analysis of applications, on which I share property with third-parties.

How has it helped my organization?

I can have quick results by just uploading compiled components. It gives me an idea about the most important vulnerabilities and fast remediation tips.

What needs improvement?

* Management of false positives * Agile best practices: Violation detection. * Support for more programming languages, like SQL. * Support for more frameworks for Java… more»

What's my experience with pricing, setup cost, and licensing?

Costs are reasonable. No special infrastructure is required and the license model is good.

If you previously used a different solution, which one did you use and why did you switch?

I used SonarQube. It lacks of real enterprise-wide security detection. I continue to use Fortify and AppScan, while I am using Veracode.

What other advice do I have?

I wish Veracode support had more SDLC integration tools.

Which other solutions did I evaluate?

I evaluated Kiuwan, Coverity, and Klocwork