Out of the solutions I have worked with which are Veracode, Kiuwan, Fortify, and Checkmarks, I would exclude Veracode because I did not have a good experience with it. If I had to choose between Kiuwan and Fortify, I prefer Kiuwan. It scans reports faster and provides more detailed analysis and mitigation steps for vulnerabilities. Additionally, Kiuwan takes into account the versions of components more effectively, which is an advantage over Fortify.

I've experienced a migration from an analog system to Kiuwan, and we've remained with Kiuwan. In my previous company, a similar transition occurred, using Kiuwan to analyze all their applications. They had various tools but chose Kiuwan, possibly because the migration process was easier.

We've worked with Checkmarx, Veracode and Fortify. I find Kiuwan to be more user-friendly, you can easily locate and download data. However, in certain processes, it might not be the most cost-effective option.

We are also using Tenable. 

The key for success of this solution in relation to other similar solutions is that it's a flexible solution.

This is our first solution for code security.

We previously used SonarQube. We have a portfolio of apps in different programming languages. With Sonar, our costs escalated too much, having to pay for plugins for each language.

We had some experienced with Rational and Compuware, in addition to the APM tools that we distribute.

We previously used a different solution. I switched because of the quotes and security rules.

We are also using SonarQube in parallel with this solution. SonarQube is a good product, but I prefer Kiuwan from a functional perspective.

In other companies I have worked for, we moved to Kiuwan/Optimyth because of the accuracy and easiness of use and setup.

Also, most of my partners and customers have moved to Kiuwan due to the metrics and programming languages supported.

We previously used several tools. We switched because Kiuwan covers the entire SDLC; provides direct information to act upon, for the developer, architects, QA, CIO and CISO, in a few seconds; automatically, fully integrated in any CI/CD setup.

No.

No, I did not.

We used Sonar and we switches due to costs with ABAP and the iOS modules.

I did not use a different solution in the past.