Coverity vs Kiuwan comparison

Read 23 Kiuwan reviews

1,540 Views
1,224 Comparison Views

93% willing to recommend

Coverity

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Kiuwan and Coverity are notable tools in the code analysis category. Coverity has an upper hand due to its comprehensive features and superior functionality.

Features: Kiuwan provides a cloud-based architecture, facilitating integration and workflow streamlining. It offers responsive support and competitive pricing. Coverity is praised for its static analysis, detailed reporting, and a robust feature set, enhancing its value proposition.

Room for Improvement: Kiuwan could improve detailed reporting, expand customization options, and enhance user interface usability. Coverity might focus on developing better documentation, increasing update speed, and improving accessibility.

Ease of Deployment and Customer Service: Kiuwan is easy to deploy, supported by excellent customer service, aiding swift issue resolution. Coverity has a more complex installation process but also offers strong customer support. There is potential for Coverity to refine its deployment model for a smoother experience.

Pricing and ROI: Kiuwan is seen as cost-effective, providing high ROI through lower setup costs and efficient operations. Coverity, with a higher initial cost, justifies its pricing with advanced features and long-term benefits, offering a favorable ROI based on its capability set.

To learn more, read our detailed Coverity vs. Kiuwan Report (Updated: December 2024).

Coverity vs. Kiuwan

Download the complete report

Helped 824,067 peers since 2012

Categories and Ranking

Coverity

Ranking in Static Application Security Testing (SAST)

4th

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Kiuwan

Ranking in Static Application Security Testing (SAST)

15th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Application Security Tools (19th)

Mindshare comparison

As of December 2024, in the Static Application Security Testing (SAST) category, the mindshare of Coverity is 8.5%, up from 7.2% compared to the previous year. The mindshare of Kiuwan is 0.9%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Md. Shahriar Hussain

Cyber Security Chartered Engineer at Banglalink

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Anshul Anshul

Sr. Manager at Wipro Limited

Efficient and accurate scanning, and detailed analysis

In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further. Another issue I've encountered is that Kiuwan only looks at the version of components and doesn't take into account any workaround fixes that have been implemented at the code level. This can result in false positives being reported. Additionally, these issues are in the "insights" tab and not in the code base security aspect. Lastly, when muting findings that are false positives, there should be an option to see the only available at the code level rather than at the organization level because it can lead to missing vulnerabilities if they are muted at the org level. An additional feature that would be helpful is the ability to easily download reports from Kiuwan. Specifically, in the "insights" tab, we have been encountering an error when trying to download the PDF report. We are able to download the code-based security report, but not the insights report. This has been an ongoing issue for the past couple of months and would be beneficial if it could be resolved. My main recommendation would be to address the issues with downloading reports that we have been experiencing. Additionally, it would be helpful if Kiuwan could support a wider range of programming languages, as there are currently some that are not compatible with the tool. If the code of a particular application falls under the category which is not compatible with Kiuwan, then it will not be able to scan it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is the integration with Jenkins."

"Coverity gives advisory and deviation features, which are some of the parts I liked."

"Coverity is easy to set up and has a less lengthy process to find vulnerabilities."

"It help us identify the latest security vulnerabilities."

"The app analysis is the most valuable feature as I know other solutions don't have that."

"I like Coverity's capability to scan codes once we push it. We don't need more time to review our colleagues' codes. Its UI is pretty straightforward."

"The product is easy to use."

"The features I find most valuable is that our entire company can publish the analysis results into our central space."

More Coverity pros

"It provides value by offering options to enhance both code quality and the security of the company."

"I have found the security and QA in the source code to be most valuable."

"The solution offers very good technical support."

"I personally like the way it breaks down security vulnerabilities with LoC at first glance."

"I've tried many open source applications and the remediation or correction actions that were provided by Kiuwan were very good in comparison."

"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."

"I've found the reporting features the most helpful."

More Kiuwan pros

Cons

"SCM integration is very poor in Coverity."

"The quality of the code needs improvement."

"Some features are not performing well, like duplicate detection and switch case situations."

"The solution's user interface and quality gate could be improved."

"The reporting tool integration process is sometimes slow."

"The product could be enhanced by providing video troubleshooting guides, making issue resolution more accessible. Troubleshooting without visual guides can be time-consuming."

"There is an extra step in my organization that involves uploading to servers, which adds overhead."

"I had tried integrating the tool with Azure DevOps, but the report I got stated that my team faced many challenges."

More Coverity cons

"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."

"I would like to see additional languages supported."

"The QA developer and security could be improved."

"The product's UI has certain shortcomings, where improvements are required."

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

"DIfferent languages, such Spanish, Portuguese, and so on."

"The development-to-delivery phase."

"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."

More Kiuwan cons

Pricing and Cost Advice

"The price is competitive with other solutions."

"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."

"The tool was fairly priced."

"Coverity is quite expensive."

"The solution is affordable."

"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."

"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."

"It is expensive."

More Coverity pricing and cost advice

"This solution is cheaper than other tools."

"It follows a subscription model. I think the price is somewhere in the middle."

"The price of Kiuwan is lower than that of other tools on the market."

"Check with your account manager."

"Kiuwan is an open-source solution and free to use."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"Nothing special. It's a very fair model."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

824,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

32%

Computer Software Company

15%

Financial Services Firm

Government

Financial Services Firm

16%

Computer Software Company

14%

Comms Service Provider

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

What do you like most about Coverity?

The solution has improved our code quality and security very well.

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

What do you like most about Kiuwan?

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

What is your experience regarding pricing and costs for Kiuwan?

I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...

What needs improvement with Kiuwan?

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...

SonarQube Server (formerly SonarQube) vs Coverity

Comparisons

Compared 53% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 6% of the time

Checkmarx One vs Coverity

Compared 5% of the time

Veracode vs Coverity

Compared 5% of the time

More Coverity Competitors

SonarQube Server (formerly SonarQube) vs Kiuwan

Compared 55% of the time

Snyk vs Kiuwan

Compared 11% of the time

Checkmarx One vs Kiuwan

Compared 10% of the time

Veracode vs Kiuwan

Compared 9% of the time

Fortify on Demand vs Kiuwan

Compared 5% of the time

More Kiuwan Competitors

Product Reports

Coverity

Download Coverity product report

Download Kiuwan product report

Also Known As

Synopsys Static Analysis

No data available

Learn More

Black Duck

Overview

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Sample Customers

SAP, Mega International, Thales Alenia Space

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

Coverity vs. Kiuwan