Kiuwan vs Qualys Web Application Scanning comparison

Kiuwan

Read 23 Kiuwan reviews

1,895 Views
1,531 Comparison Views

93% willing to recommend

Qualys Web Application Scan...

Read 31 Qualys Web Application Scanning reviews

4,482 Views
3,461 Comparison Views

84% willing to recommend

Kiuwan

Qualys Web Application Scan...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Kiuwan and Qualys Web Application Scanning based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Kiuwan vs. Qualys Web Application Scanning Report (Updated: May 2024).

Buyer's Guide

Kiuwan vs. Qualys Web Application Scanning

May 2024

Download the complete report

Helped 787,061 peers since 2012

Categories and Ranking

Kiuwan

Ranking in Application Security Tools

22nd

Ranking in Static Application Security Testing (SAST)

16th

Average Rating

8.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Qualys Web Application Scan...

Ranking in Application Security Tools

19th

Ranking in Static Application Security Testing (SAST)

14th

Average Rating

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Market share comparison

As of June 2024, in the Application Security Tools category, the market share of Kiuwan is 0.9% and it decreased by 32.0% compared to the previous year. The market share of Qualys Web Application Scanning is 2.4% and it increased by 24.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Unique Categories:

Static Application Security Testing (SAST)

0.6%

Featured Reviews

Francisco Parada López

Security consultant at Entelgy Innotec Security

Nov 8, 2023

Detects security vulnerabilities in source code, enforces coding guidelines, and manages open-source components

Integration with development frameworks like IntelliJ, NetBeans, and Visual Studio Code can be improved as a part of Kiuwan's capabilities. There are plugins available for these systems, facilitating smoother integration and usage within these popular development environments. In our scenario, with approximately fifty applications and ten users, conducting around five hundred analyses per day, we've noticed that updating Kiuwan rules is time-consuming. Analyzing new rules also takes a significant amount of time. It might be partly due to how we develop the rules; it seems that our approach to creating rules might contribute to this issue. This impacts the time it takes to conduct analyses using Kiuwan.

Read full review

Brammadevan K

Cyber Security Engineer at R S Consulting Services

Feb 22, 2024

Operates as a DAST tool, examining the application from an external perspective to identify security issues

One area for improvement is the application scan interface. Although recent updates have introduced some features, there's a gap in supporting standards beyond OWASP. Currently, there isn't an option to select or integrate other security standards directly within the platform, which limits the scope of scans to primarily OWASP. For broader compliance, custom integrations are required, which is a cumbersome process. The platform primarily supports OWASP standards for scanning. If an organization needs to comply with other standards, such as ISO or NIST, there's no straightforward option to select these within the scanning interface. This limitation requires custom solutions to meet other compliance requirements, which is not ideal. Qualys should enhance its interface to allow users to easily select and scan according to multiple standards, not just OWASP. This includes both internal and external scans, providing a more flexible and comprehensive approach to web application security. In addition to choosing standards, there's a distinction between internal and external scanning processes that could be streamlined. Currently, for internal scanning, specific configurations and scanner appliances need to be deployed within the network, which differs from the simpler setup for external scans. This dual process complicates the setup for comprehensive scanning coverage. The process should be simplified to eliminate the need for two distinct setups for internal and external scans within Qualys.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report."

"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."

"I have found the security and QA in the source code to be most valuable."

"I like that it provides a detailed report that lets you know the risk index and the vulnerability."

"The solution has a continuous integration process."

"The solution offers very good technical support."

"I personally like the way it breaks down security vulnerabilities with LoC at first glance."

"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."

More Kiuwan pros

"With our vulnerabilities under control, it's putting our services in compliance and minimizing our risk for exposure."

"It is a good product for website penetration testing to detect vulnerabilities."

"This product is designed for easy scalability and can easily scale up without major challenges."

"The simplicity of exporting reports and the simplicity and clarity of the reports included with the product are good."

"The product prevents possible vulnerabilities in our network."

"It is a cloud-based solution, so it is easy to scale."

"We can do scanning and submit reports straight to the customers when there are new vulnerabilities, then tell them whether they are affected or not."

"The most valuable feature is that we are able to scan the services and put credentials like a user ID password. We can verify the vulnerability level."

More Qualys Web Application Scanning pros

Cons

"The solution seems to give us a lot of false positives. This could be improved quite a bit."

"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."

"The next release should include more flexibility in the reporting."

"The QA developer and security could be improved."

"I would like to see better integration with Azure DevOps in the next release of this solution."

"Perhaps more languages supported."

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

"I would like to see additional languages supported."

More Kiuwan cons

"The virus code updates are not frequent enough."

"We receive false positives sometimes when using a solution that could be improved. However, the technical team provides us with the exact explanation why it was giving us that kind of error."

"There could be better management and faster scanning."

"They should try to include business logic vulnerabilities in the scanner testing."

"The UI is not user-friendly and you don't have a yearly reporting facility where you can slice and dice in different jobs."

"There should be better visibility into the application."

"The software’s pricing could be improved."

"In certain cases, this product does have false positives, which the company should work on."

More Qualys Web Application Scanning cons

Pricing and Cost Advice

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"It follows a subscription model. I think the price is somewhere in the middle."

"Nothing special. It's a very fair model."

"This solution is cheaper than other tools."

"The price of Kiuwan is lower than that of other tools on the market."

"Check with your account manager."

"Kiuwan is an open-source solution and free to use."

"Qualys has an IT-based licensing based on a yearly license, which is a good way of handling it. However, in some cases, when we do the PCI scanning, the host will not like the scanning and we lose the IT license. So, this could be improved."

"We are on an annual license for the solution and the pricing could be more affordable."

"The product has a very good licensing model."

"From my perspective, it is a budget-friendly option."

"Qualys Web Application Scanning's pricing is a bit expensive compared to other solutions available in the market."

"It is best to be an institutional buyer and directly contact the sales team, as they can provide over-the-top discounts for bulk orders."

"It is an expensive platform."

"There are different options available with respect to licensing."

More Qualys Web Application Scanning pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

787,061 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

13%

Comms Service Provider

12%

Insurance Company

Computer Software Company

16%

Financial Services Firm

15%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Kiuwan?

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

See all answers

What is your experience regarding pricing and costs for Kiuwan?

I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...

See all answers

What needs improvement with Kiuwan?

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...

See all answers

What do you like most about Qualys Web Application Scanning?

The vulnerability management feature is a strong one. And also the patch management feature.

See all answers

What is your experience regarding pricing and costs for Qualys Web Application Scanning?

From my perspective, it is a budget-friendly option. Qualys offers good value for the features and protection it provides. The pricing seems reasonable, considering the comprehensive security solut...

See all answers

What needs improvement with Qualys Web Application Scanning?

See all answers

Comparisons

SonarQube vs Kiuwan

Compared 51% of the time

Checkmarx One vs Kiuwan

Compared 14% of the time

Snyk vs Kiuwan

Compared 10% of the time

Veracode vs Kiuwan

Compared 9% of the time

Fortify on Demand vs Kiuwan

Compared 8% of the time

More Kiuwan Competitors

OWASP Zap vs Qualys Web Application Scanning

Compared 20% of the time

Veracode vs Qualys Web Application Scanning

Compared 10% of the time

SonarQube vs Qualys Web Application Scanning

Compared 10% of the time

PortSwigger Burp Suite Professional vs Qualys Web Application Scanning

Compared 7% of the time

Fortify WebInspect vs Qualys Web Application Scanning

Compared 6% of the time

More Qualys Web Application Scanning Competitors

Product Reports

Buyer's Guide

Kiuwan

June 2024

Download Kiuwan product report

Buyer's Guide

Qualys Web Application Scanning

May 2024

Download Qualys Web Application Scanning product report

Also Known As

No data available

Qualys WAS

Learn More

Kiuwan

Qualys

Overview

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Qualys Web Application Scanning (WAS) is a fully cloud-based web application security scanner. The scanner will automatically crawl periodically and test web applications to discover potential vulnerabilities, including cross-site scripting (XSS) and SQL injection. The consistent testing equips the automated service to generate consistent results, lessen false positives, and offer the ability to scale to protect thousands of websites effortlessly.

Qualys Web Application Scanning is bundled with different scanning technology to carefully scan websites for malware infections and will send notifications to website owners to assist in preventing blacklisting and brand reputation damage. As digital transformation takes place in various organizations, Qualys WAS gives organizations the ability to track and document their web app security status through its interactive reporting capabilities.

Qualys WAS empowers organizations to remediate any web application vulnerabilities quickly. Some of the key tools offered are:

Deep Scanning: All apps and APIs on your internal network and public cloud are covered by Qualys WAS deep scanning to show you any visible vulnerabilities.
DevSec Ops Tool: Detect security issues in your code while still in app development stages and generate comprehensive reports.
Comprehensive Discovery: Discover and catalog new and unknown web apps in your network.
Malware Detection: Scan a website, identify vulnerabilities, and receive alerts to any infections.

Benefits of Qualys Web Application Scanning

Qualys Web Application Scanning offers many benefits, including:

Quick Deployment: Requires no infrastructure or software to upkeep.
Effortless Scalability: Effortlessly launch a deep scan and protect thousands of websites.
Centralized Management: Manage and mend all web app vulnerabilities through a single interface.
Excellent Integration Capabilities: Integrates with Qualys Web App Firewall (WAF) for a single-click virtual patching of found vulnerabilities.
Respond to Threats Immediately: Qualys Continuous Monitoring offers the user a hands-free service by automatically launching scanning and sending notifications of a potential threat.
Cost-effective Solution: Data is analyzed in real time as Qualys WAS is an end-to-end solution; this helps avoid costs associated with managing multiple security vendors.

Reviews from Real Users

Qualys Web Application Scanning stands out among its competitors for a variety of reasons. Two of those reasons are its progressive scan and quick detection of vulnerabilities.

P.K., a senior software developer at a tech vendor, writes, "The feature that I have found most valuable is the progressive scan. It is good. It's done in 24 hours."

Nagaraj S., lead cybersecurity engineer at a tech service company, notes, "I have found the detection of vulnerabilities tool thorough with good results and the graphical display output to be wonderful and full of colors. It allows many types of outputs, such as bar and chart previews."

Sample Customers

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

BskyB, Cartagena, ClearPoint Learning Systems, Connect Group, du, Fortrex Technologies, HBOR, HDI, Highlights for Children, The Lithuanian State Enterprise Centre of Registers, City of Miami Beach, Microsoft, MidlandHR, MSCI Inc., Northern Arizona University, Ofgem, Olympus Europa, PhoneFactor, RTL Nederland, ThousandEyes, VGZ Organisatie B.V.

Buyer's Guide

Kiuwan vs. Qualys Web Application Scanning

May 2024

Free Report: Kiuwan vs. Qualys Web Application Scanning

Find out what your peers are saying about Kiuwan vs. Qualys Web Application Scanning and other solutions. Updated: May 2024.

DOWNLOAD NOW

787,061 professionals have used our research since 2012.

See our Kiuwan vs. Qualys Web Application Scanning report.

See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.