CodeSonar vs Kiuwan comparison

Read 23 Kiuwan reviews

1,430 Views
1,094 Comparison Views

93% willing to recommend

CodeSonar

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Kiuwan and CodeSonar are competing tools in the code analysis category. User feedback suggests that Kiuwan's competitive pricing and responsive support give it an edge, whereas CodeSonar's superior functionality and extensive features make it a preferred choice for those who need more comprehensive capabilities.

Features: Kiuwan provides continuous code quality analysis, detects security vulnerabilities, and offers a flexible pricing structure. CodeSonar is recognized for its comprehensive static analysis, strong security assessment, and advanced error detection features that distinguish it in the market.

Room for Improvement: Kiuwan users recommend improving its integration with a wider range of development environments. They also see room for enhancing its analysis depth to compete with more powerful tools like CodeSonar. CodeSonar users suggest simplifying its learning curve with enhanced onboarding resources. They also wish for a more streamlined user interface and faster initial setup.

Ease of Deployment and Customer Service: Kiuwan has a quick and straightforward deployment process, gaining praise for its supportive customer service. CodeSonar, while having a complex deployment, balances it with highly effective support services that improve user satisfaction over time.

Pricing and ROI: Kiuwan is known for lower setup costs and a quicker ROI, often due to its accessible pricing structure. CodeSonar's higher initial investment is offset by its robust capabilities, providing long-term benefits that justify its ROI.

To learn more, read our detailed CodeSonar vs. Kiuwan Report (Updated: April 2025).

CodeSonar vs. Kiuwan

Download the complete report

Helped 847,625 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

34th

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (8th)

Kiuwan

Ranking in Application Security Tools

28th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (24th)

Mindshare comparison

As of April 2025, in the Application Security Tools category, the mindshare of CodeSonar is 1.4%, up from 0.9% compared to the previous year. The mindshare of Kiuwan is 1.1%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Mustufa Bhavnagarwala

CyberRisk Solution Advisor at Deloitte

Though a stable tool, the UI needs improvement

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"It has been able to scale."

"The tool is very good for detecting memory leaks."

"CodeSonar’s most valuable feature is finding security threats."

"There is nice functionality for code surfing and browsing."

"The solution offers very good technical support."

"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."

"Software analytics for a lot of different languages including ABAP."

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."

"The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report."

"I personally like the way it breaks down security vulnerabilities with LoC at first glance."

"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."

"The solution has a continuous integration process."

More Kiuwan pros

Cons

"The scanning tool for core architecture could be improved."

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"There could be a shared licensing model for the users."

"It would be beneficial for the solution to include code standards and additional functionality for security."

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"It was expensive."

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"Integration of the programming tools could be improved."

"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."

"The development-to-delivery phase."

"DIfferent languages, such Spanish, Portuguese, and so on."

"It could improve its scalability abilities."

"The solution seems to give us a lot of false positives. This could be improved quite a bit."

"The next release should include more flexibility in the reporting."

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

More Kiuwan cons

Pricing and Cost Advice

"The application’s pricing is high compared to other tools."

"The solution's price depends on the number of licenses needed and the source code for the project."

"Pricing is a bit costly."

"Our organization purchased a license to use the solution."

"It follows a subscription model. I think the price is somewhere in the middle."

"This solution is cheaper than other tools."

"Check with your account manager."

"The price of Kiuwan is lower than that of other tools on the market."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"Nothing special. It's a very fair model."

"Kiuwan is an open-source solution and free to use."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

847,625 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

25%

Computer Software Company

12%

University

Financial Services Firm

Computer Software Company

17%

Financial Services Firm

15%

Insurance Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CodeSonar?

CodeSonar’s most valuable feature is finding security threats.

What is your experience regarding pricing and costs for CodeSonar?

The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.

What needs improvement with CodeSonar?

Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...

What do you like most about Kiuwan?

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

What is your experience regarding pricing and costs for Kiuwan?

I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...

What needs improvement with Kiuwan?

SonarQube Server (formerly SonarQube) vs CodeSonar

Comparisons

Compared 61% of the time

Coverity vs CodeSonar

Compared 21% of the time

Polyspace Code Prover vs CodeSonar

Compared 8% of the time

Klocwork vs CodeSonar

Compared 2% of the time

Understand vs CodeSonar

Compared 2% of the time

More CodeSonar Competitors

SonarQube Server (formerly SonarQube) vs Kiuwan

Compared 54% of the time

Snyk vs Kiuwan

Compared 10% of the time

Veracode vs Kiuwan

Compared 9% of the time

Checkmarx One vs Kiuwan

Compared 9% of the time

Fortify on Demand vs Kiuwan

Compared 5% of the time

More Kiuwan Competitors

Product Reports

Application Security Tools

Download CodeSonar product report

Download Kiuwan product report

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

CodeSonar vs. Kiuwan