CAST Highlight vs Kiuwan comparison

Read 23 Kiuwan reviews

3,387 Views
2,710 Comparison Views

93% willing to recommend

CAST Highlight

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Kiuwan based on real PeerSpot user reviews.

Find out what your peers are saying about Veracode, Snyk, Black Duck and others in Software Composition Analysis (SCA).

To learn more, read our detailed Software Composition Analysis (SCA) Report (Updated: June 2026).

Software Composition Analysis (SCA)

Download the complete report

Helped 903,067 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CAST Highlight

Average Rating

7.8

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (14th)

Kiuwan

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Application Security Tools (32nd), Static Application Security Testing (SAST) (28th)

Mindshare comparison

CAST Highlight and Kiuwan aren’t in the same category and serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.3%, up 1.0% compared to last year.
Kiuwan, on the other hand, focuses on Application Security Tools, holds 1.2% mindshare, down 1.2% since last year.

Software Composition Analysis (SCA) Mindshare Distribution
Product	Mindshare (%)
CAST Highlight	1.3%
Snyk	11.1%
Black Duck SCA	9.1%
Other	78.5%

Software Composition Analysis (SCA)

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Kiuwan	1.2%
SonarQube	12.4%
Checkmarx One	8.2%
Other	78.2%

Application Security Tools

Featured Reviews

Nishant Chauhan

Senior Data Engineer at LTM

Automated code insights have improved security checks and made review workflows more consistent

If I talk about improvements for CAST Highlight, I would suggest three things. The first is better understanding or niche understanding. Right now, the intent matching is strong for general topics such as ease of use, but for niche B2B terms such as HIPAA compliance or multi-tenant architecture, it sometimes misses context. Improving the domain-specific models would make highlights more accurate for these verticals. The second improvement is more control over the deduplication logic. CAST Highlight's deduplication is great for avoiding spam, but sometimes we want two similar quotes if they are from very different company sizes, such as SMB versus enterprise perspectives on pricing. A slider to adjust deduplication strictness would help. The third suggestion I would like to give is deeper sentiment and outcome tagging. While it has core sentiment capabilities, it does not tag outcomes automatically. For instance, if a quote mentions saved $50,000 per year, tagging that as cost savings $50,000 would let us build ROI charts instantly instead of reading each quote manually. Regarding user experience, integrations, and reporting, I think there is room to enhance those aspects. Regarding user experience, I would suggest improving user actions in terms of bulk actions and keyboard shortcuts. Day-to-day analysts review 50-plus suggested quotes, and currently it is mostly clicking to approve one by one. Adding bulk approve or reject options and keyboard shortcuts would significantly reduce the time taken. A small UX change can lead to a big speed boost. The second point is integrations when pushing to the CMS and Slack alerts. Right now, we export approved highlights manually from CAST Highlight. If CAST Highlight could push directly to our CMS or send Slack alerts for high-strength quotes that hit trending topics, it would close the loop faster, reducing copy-pasting. The third improvement relates to reporting, specifically custom insight dashboards. The tool displays which topics have the most highlights, but we cannot build custom dashboards yet. For example, showing all security quotes from healthcare companies with more than 1,000 employees over the last 90 days would enable better filtering, and exportable dashboards would streamline quarterly reviews.

Read full review

Mustufa Bhavnagarwala

CyberRisk Solution Advisor at a consultancy with 10,001+ employees

Though a stable tool, the UI needs improvement

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"In cloud migration, I use CAST highlight to identify blockers, which are the negative road patterns, and also the boosters, which are positive code patterns."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable, and it works seamlessly with most languages."

"We are using CAST Highlight for the location because it's an indicator for us that can differentiate us from the other health insurance company, and we are using the indicator as proof of the quality of service for our application."

"It offers good performance."

"The solution provides agnostic blockers for platforms as well as for containerization."

"Overall, the accuracy of CAST Highlight has been strong and reliability is consistent for our use case."

"We've been using it for two years and found that it is really profitable to have the product in our arsenal."

More CAST Highlight pros

"Kiuwan has enabled us to give our customers peace of mind through early identification of code vulnerabilities and remediation before delivery to the customer."

"The solution has a continuous integration process."

"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."

"It provides value by offering options to enhance both code quality and the security of the company."

"From the tool itself, the developer can run an analysis with the same quality, and with this tool, every developer has the opportunity to do an unlimited analysis."

"I've found the reporting features the most helpful."

"We have been using this solution for one and a half years."

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."

More Kiuwan pros

Cons

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"The ease of configuration and customization could be improved in CAST Highlight."

"Right now, the intent matching is strong for general topics such as ease of use, but for niche B2B terms such as HIPAA compliance or multi-tenant architecture, it sometimes misses context."

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"Technical support could be better."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive."

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"If I received categorization in containerization blockers, it would save time."

More CAST Highlight cons

"I would like to see additional languages supported."

"The next release should include more flexibility in the reporting."

"We faced a lot of problems with the initial setup and support gave us difficulties around the installation."

"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."

"The QA developer and security could be improved."

"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."

"Improvement could be made with the integration of the programming tools."

"The solution seems to give us a lot of false positives. This could be improved quite a bit."

More Kiuwan cons

Pricing and Cost Advice

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"CAST Highlight is an expensive solution."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"Kiuwan is an open-source solution and free to use."

"The price of Kiuwan is lower than that of other tools on the market."

"It follows a subscription model. I think the price is somewhere in the middle."

"Nothing special. It's a very fair model."

"Check with your account manager."

"This solution is cheaper than other tools."

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

903,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Government

Outsourcing Company

Computer Software Company

Construction Company

12%

University

11%

Manufacturing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	1
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	4
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for CAST Highlight?

The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.

See all answers

What needs improvement with CAST Highlight?

The solution provides agnostic blockers for platforms as well as for containerization. Within that containerization, it offers generic blockers. However, my project might require it to provide Wind...

See all answers

What is your primary use case for CAST Highlight?

For CAST, I use it in cloud migration roadmap and in open source safety issues. These are my two main use cases.

See all answers

Ask a question

Earn 20 points

Comparisons

Snyk vs CAST Highlight

Compared 15% of the time

Veracode vs CAST Highlight

Compared 15% of the time

Black Duck SCA vs CAST Highlight

Compared 8% of the time

SonarQube vs CAST Highlight

Compared 8% of the time

Sonatype Lifecycle vs CAST Highlight

Compared 6% of the time

More CAST Highlight Competitors

SonarQube vs Kiuwan

Compared 19% of the time

Veracode vs Kiuwan

Compared 13% of the time

GitHub vs Kiuwan

Compared 7% of the time

Checkmarx One vs Kiuwan

Compared 6% of the time

Snyk vs Kiuwan

Compared 4% of the time

More Kiuwan Competitors

Product Reports

CAST Highlight

Download CAST Highlight product report

Download Kiuwan product report

Overview

CAST Highlight is a comprehensive platform that integrates with Azure DevOps, offering remote functionalities without direct codebase access. It quickly identifies cloud migration blockers and supports most programming languages with an easy setup.

CAST Highlight stands out with its user-friendly interface and dashboard, enabling efficient scanning for environment quality. Its automation and speed are particularly valued, making it distinct in the software analysis domain. While users encounter challenges with language-specific insights and expensive licensing, they benefit from its capability to assess code base states during mergers, acquisitions, and cloud migration planning. Technical support poses issues, and some users face hurdles with configuration customization and issue reporting clarity. Despite these challenges, CAST Highlight demonstrates effectiveness in identifying application service quality and ensuring legal, security, and IP compliance.

What features define CAST Highlight?

Seamless Integration: Works with Azure DevOps for enhanced functionality.
Remote Functionality: Operates without direct codebase access, offering flexibility.
Cloud Migration Assistance: Identifies blockers and boosters for cloud strategies.
Programming Language Support: Compatible with a wide range of languages.
Easy Setup: Simplifies the process for quick implementation.

What are the benefits of using CAST Highlight?

Speed and Automation: Delivers quick scans and automated processes for efficiency.
Application Quality Insights: Provides detailed assessments for application portfolios.
Enhanced Communication: Simple notations improve team communication.
Legal and Security Compliance: Ensures compliance insights are accessible.

CAST Highlight is adopted across industries for tasks such as assessing code during mergers, managing application portfolios, and planning cloud migrations. It facilitates open source safety checks and replatforming architectures, serving roles in firewall and storage management. Users rely on it for service quality verification and distinguishing applications from competitors.

CAST

Kiuwan offers comprehensive security and vulnerability testing capabilities, focusing on code analysis, fast scanning, and detailed risk assessments. Supporting many technologies, it integrates well into development workflows to ensure code compliance and enhance code quality.

Known for its application portfolio governance, Kiuwan provides fast scanning and reporting features, alongside an intuitive interface. It supports languages from COBOL to JavaScript, offering modular capabilities and security integration for continuous deployment. Developers can perform efficient local or cloud-based scans, benefiting from action plans for better code correction. Integration with tools like Jenkins facilitates quick processing and detailed risk assessments, while challenges remain in language support expansion and smoother integration with Azure DevOps and popular IDEs. Enhanced frameworks and mobile development testing would amplify its utility, with users seeking improved navigation, report downloading, and technical support.

What are the most important features of Kiuwan?

Fast Scanning: Provides quick scans for immediate insights.
Reporting: Robust features for generating detailed reports.
Intuitive UI: Easy-to-navigate interface.
Technology Coverage: Supports a range of languages from COBOL to JS.
Tool Integration: Seamlessly integrates with Jenkins for CI/CD processes.
Modularity: Allows specific models for targeted analysis.

What benefits or ROI should users look for in Kiuwan reviews?

Enhanced Code Security: Identifies vulnerabilities swiftly and efficiently.
Continuous Integration: Facilitates ongoing security assessments.
Improved Code Compliance: Helps maintain adherence to coding standards.
Actionable Insights: Provides risk assessments with actionable recommendations.

In industries focused on software development, Kiuwan is integral for security and vulnerability assessments. It's embedded into workflows to analyze, detect and correct vulnerabilities, addressing threats like SQL injection and adhering to OWASP Top 10. The tool supports secure coding practices and performance evaluation, aiding organizations in maintaining rigorous security standards.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

Software Composition Analysis (SCA)