Fortify Application Defender vs Kiuwan comparison

Fortify Application Defender

Read 23 Kiuwan reviews

1,613 Views
1,288 Comparison Views

93% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Kiuwan and Fortify Application Defender compete in the application security solutions category. Fortify Application Defender offers advanced security features, providing an upper hand for those prioritizing comprehensive protection.

Features: Kiuwan is known for its integration capabilities, automation of security processes, and affordability. Fortify Application Defender excels with real-time threat detection, comprehensive security features, and advanced protection capabilities.

Room for Improvement: Kiuwan users note the need for faster processing speeds, better language support, and a smoother user interface. Fortify Application Defender users look for enhanced reporting, a reduced learning curve for complex features, and streamlined operations.

Ease of Deployment and Customer Service: Kiuwan offers an easy deployment process coupled with effective customer service. Fortify Application Defender presents more deployment challenges but provides strong customer support to guide users.

Pricing and ROI: Kiuwan offers cost-effective solutions promising a good ROI, appealing to budget-conscious buyers. Fortify Application Defender, with its higher initial cost, is recognized as an investment in extensive security, with its ROI reflected in advanced protection and compliance.

To learn more, read our detailed Fortify Application Defender vs. Kiuwan Report (Updated: December 2024).

Fortify Application Defender vs. Kiuwan

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Fortify Application Defender

Ranking in Application Security Tools

33rd

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Kiuwan

Ranking in Application Security Tools

19th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (15th)

Mindshare comparison

As of December 2024, in the Application Security Tools category, the mindshare of Fortify Application Defender is 0.7%, down from 0.9% compared to the previous year. The mindshare of Kiuwan is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Saroj-Patnaik

Software Development Engineer 3 at Ernst & Young

Reliable solution with excellent machine learning algorithms but expensive and lacking support

I primarily use Fortify Application Defender to assess whether our products can defend against applications Fortify Application Defender's most valuable features are machine learning algorithms, real-time remediation, and automatic vulnerability notifications. Fortify Application Defender gives…

Read full review

Anshul Anshul

Sr. Manager at Wipro Limited

Efficient and accurate scanning, and detailed analysis

In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further. Another issue I've encountered is that Kiuwan only looks at the version of components and doesn't take into account any workaround fixes that have been implemented at the code level. This can result in false positives being reported. Additionally, these issues are in the "insights" tab and not in the code base security aspect. Lastly, when muting findings that are false positives, there should be an option to see the only available at the code level rather than at the organization level because it can lead to missing vulnerabilities if they are muted at the org level. An additional feature that would be helpful is the ability to easily download reports from Kiuwan. Specifically, in the "insights" tab, we have been encountering an error when trying to download the PDF report. We are able to download the code-based security report, but not the insights report. This has been an ongoing issue for the past couple of months and would be beneficial if it could be resolved. My main recommendation would be to address the issues with downloading reports that we have been experiencing. Additionally, it would be helpful if Kiuwan could support a wider range of programming languages, as there are currently some that are not compatible with the tool. If the code of a particular application falls under the category which is not compatible with Kiuwan, then it will not be able to scan it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of Fortify Application Defender are the code packages that are default."

"The most valuable feature is the ability to automatically feed it rules what it's coupled with the WebInspect dynamic application scanning technology."

"Fortify Application Defender's most valuable features are machine learning algorithms, real-time remediation, and automatic vulnerability notifications."

"We are able to provide out customers with a secure application after development. They are no longer left wondering if they are vulnerable to different threats within the market following deployment."

"The information from Fortify Application Defender on how to fix and solve issues is very good compared to other solutions."

"The tool's most valuable feature is software composition analysis. This feature works well with my .NET applications, providing a better understanding of library vulnerabilities."

"The most valuable feature is that it analyzes data in real-time."

"The product saves us cost and time."

More Fortify Application Defender pros

"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."

"We are using this solution to increase the quality of our software and to test the vulnerabilities in our tools before the customers find them."

"I like that it provides a detailed report that lets you know the risk index and the vulnerability."

"I've tried many open source applications and the remediation or correction actions that were provided by Kiuwan were very good in comparison."

"I personally like the way it breaks down security vulnerabilities with LoC at first glance."

"Software analytics for a lot of different languages including ABAP."

"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."

"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."

More Kiuwan pros

Cons

"The solution is quite expensive."

"I encountered many false positives for Python applications."

"Fortify Application Defender gives a lot of false positives."

"The biggest complaint that I have heard concerns additional platform support because right now, it only supports applications that are written in .NET and Java."

"The product should integrate industry-standard code review tools internally with its system. This would streamline the coding process, as developers wouldn't need multiple tools for code review and security checks. Many independent and open-source tools are available, from Apache to various libraries. Using multiple DevOps pipeline tools can slow the turnaround time."

"The solution could improve the time it takes to scan. When comparing it to SonarQube it does it in minutes while in Fortify Application Defender it can take hours."

"The workbench is a little bit complex when you first start using it."

"The false positive rate should be lower."

More Fortify Application Defender cons

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

"Perhaps more languages supported."

"I would like to see additional languages supported."

"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."

"The solution seems to give us a lot of false positives. This could be improved quite a bit."

"The product's UI has certain shortcomings, where improvements are required."

"The development-to-delivery phase."

"The configuration hasn't been that good."

More Kiuwan cons

Pricing and Cost Advice

"The product’s price is much higher than other tools."

"The price of this solution could be less expensive."

"The licensing is very complex, it's project based and can range from $10,000 to $200,000+ depending on the project type and size."

"I rate the solution's pricing a five out of ten. It comes as an annual cloud subscription. The tool's pricing is around 50 lakhs."

"The base licensing costs for the SaaS platform is about $900 USD per application, per year."

"Fortify Application Defender is very expensive."

"The price of Kiuwan is lower than that of other tools on the market."

"Check with your account manager."

"This solution is cheaper than other tools."

"It follows a subscription model. I think the price is somewhere in the middle."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"Nothing special. It's a very fair model."

"Kiuwan is an open-source solution and free to use."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

23%

Computer Software Company

14%

Manufacturing Company

13%

Government

Financial Services Firm

16%

Computer Software Company

14%

Comms Service Provider

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Fortify Application Defender?

I find the configuration of rules in Fortify Application Defender useful. Its integration is also easy.

What needs improvement with Fortify Application Defender?

The product should integrate industry-standard code review tools internally with its system. This would streamline the coding process, as developers wouldn't need multiple tools for code review and...

What is your primary use case for Fortify Application Defender?

We use the solution for fast code review. It is integrated into our DevOps pipeline.

What do you like most about Kiuwan?

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

What is your experience regarding pricing and costs for Kiuwan?

I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...

What needs improvement with Kiuwan?

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...

Checkmarx One vs Fortify Application Defender

Comparisons

Compared 42% of the time

CAST Application Intelligence Platform vs Fortify Application Defender

Compared 13% of the time

Qualys Web Application Scanning vs Fortify Application Defender

Compared 13% of the time

SonarQube Server (formerly SonarQube) vs Fortify Application Defender

Compared 9% of the time

Coverity vs Fortify Application Defender

Compared 8% of the time

More Fortify Application Defender Competitors

SonarQube Server (formerly SonarQube) vs Kiuwan

Compared 55% of the time

Snyk vs Kiuwan

Compared 11% of the time

Checkmarx One vs Kiuwan

Compared 10% of the time

Veracode vs Kiuwan

Compared 9% of the time

Fortify on Demand vs Kiuwan

Compared 5% of the time

More Kiuwan Competitors

Product Reports

Application Security Tools

Download Fortify Application Defender product report

Download Kiuwan product report

Also Known As

HPE Fortify Application Defender, Micro Focus Fortify Application Defender

No data available

Learn More

OpenText

Overview

Micro Focus Security Fortify Application Defender is a runtime application self-protection (RASP) solution that helps you manage and mitigate risk from homegrown or third-party applications. It provides centralized visibility into application use and abuse while protecting from software vulnerability exploits and other violations in real time.

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Sample Customers

ServiceMaster, Saltworks, SAP

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial

Fortify Application Defender vs. Kiuwan