HCL AppScan vs Kiuwan comparison

Read 23 Kiuwan reviews

1,541 Views
1,233 Comparison Views

93% willing to recommend

HCL AppScan

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

HCL AppScan and Kiuwan compete in the application security category. Users indicate Kiuwan may have the upper hand due to its advanced features despite higher pricing.

Features: HCL AppScan offers extensive security testing capabilities, competitive pricing, and comprehensive support. Kiuwan provides advanced analysis features across coding languages, easy integration with workflows, and a robust feature set.

Room for Improvement: HCL AppScan could improve its integration options, loading speeds, and customization capabilities. Kiuwan needs better customization, enhanced reporting functionalities, and broader integration options.

Ease of Deployment and Customer Service: HCL AppScan is noted for straightforward deployment, valuable support during setup, and reliable customer service. Kiuwan presents a more complex deployment but offers responsive service and thorough technical guidance.

Pricing and ROI: HCL AppScan is praised for cost-effectiveness and strong ROI, balancing cost with functional depth. Kiuwan, despite being more costly, provides strong ROI with its advanced features and long-term value satisfaction.

To learn more, read our detailed HCL AppScan vs. Kiuwan Report (Updated: January 2025).

Download the complete report

HCL AppScan vs. Kiuwan

January 2025

Helped 825,661 peers since 2012

Categories and Ranking

HCL AppScan

Ranking in Application Security Tools

15th

Ranking in Static Application Security Testing (SAST)

12th

Average Rating

7.8

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (1st)

Kiuwan

Ranking in Application Security Tools

19th

Ranking in Static Application Security Testing (SAST)

15th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of January 2025, in the Application Security Tools category, the mindshare of HCL AppScan is 2.7%, down from 2.8% compared to the previous year. The mindshare of Kiuwan is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

AnshulTomar

Cyber Security Architect and Presales Consultant at Kyndryl

Scalable platform with efficient static and dynamic testing features

We use the product for Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). By integrating AppScan into our CI/CD pipelines, aligned with Agile methodologies, we ensure that security testing becomes an integral part of the software development lifecycle The…

Read full review

Anshul Anshul

Sr. Manager at Wipro Limited

Efficient and accurate scanning, and detailed analysis

In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further. Another issue I've encountered is that Kiuwan only looks at the version of components and doesn't take into account any workaround fixes that have been implemented at the code level. This can result in false positives being reported. Additionally, these issues are in the "insights" tab and not in the code base security aspect. Lastly, when muting findings that are false positives, there should be an option to see the only available at the code level rather than at the organization level because it can lead to missing vulnerabilities if they are muted at the org level. An additional feature that would be helpful is the ability to easily download reports from Kiuwan. Specifically, in the "insights" tab, we have been encountering an error when trying to download the PDF report. We are able to download the code-based security report, but not the insights report. This has been an ongoing issue for the past couple of months and would be beneficial if it could be resolved. My main recommendation would be to address the issues with downloading reports that we have been experiencing. Additionally, it would be helpful if Kiuwan could support a wider range of programming languages, as there are currently some that are not compatible with the tool. If the code of a particular application falls under the category which is not compatible with Kiuwan, then it will not be able to scan it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase."

"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."

"This is a stable solution."

"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."

"Compared to other tools only AppScan supports special language."

"The solution is easy to use."

"Technical support is helpful."

"There's extensive functionality with custom rules and a custom knowledge base."

More HCL AppScan pros

"I like that it provides a detailed report that lets you know the risk index and the vulnerability."

"I have found the security and QA in the source code to be most valuable."

"The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report."

"The solution offers very good technical support."

"The solution has a continuous integration process."

"I've found the reporting features the most helpful."

"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."

"The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."

More Kiuwan pros

Cons

"There is room for improvement in the pricing model."

"The solution often has a high number of false positives. It's an aspect they really need to improve upon."

"It has crashed at times."

"AppScan needs to improve its handling of false positives."

"AppScan is too complicated and should be made more user-friendly."

"The solution's scalability can be a matter of concern because one license runs on one machine only."

"The solution needs to improve in some areas. The tool needs to add more languages. It also needs to improve its speed."

"A desktop version should be added."

More HCL AppScan cons

"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."

"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."

"DIfferent languages, such Spanish, Portuguese, and so on."

"The QA developer and security could be improved."

"The configuration hasn't been that good."

"In Kiuwan there are sometimes duplicates found in the dependency scan under the "insights" tab. It's unclear to me why these duplicates are appearing, and it would be helpful if the application teams could investigate further."

"Integration of the programming tools could be improved."

"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."

More Kiuwan cons

Pricing and Cost Advice

"Our clients are willing to pay the extra money. It is expensive."

"The product has premium pricing and could be more competitive."

"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."

"AppScan is a little bit expensive. IBM needs to work a little bit on the pricing model, decreasing the license cost."

"The solution is cheap."

"HCL AppScan is expensive."

"I rate the product's price a seven on a scale of one to ten, where one is low, and ten is high. HCL AppScan is an expensive tool."

"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."

More HCL AppScan pricing and cost advice

"Nothing special. It's a very fair model."

"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."

"Check with your account manager."

"Kiuwan is an open-source solution and free to use."

"This solution is cheaper than other tools."

"It follows a subscription model. I think the price is somewhere in the middle."

"The price of Kiuwan is lower than that of other tools on the market."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

825,661 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

15%

Manufacturing Company

10%

Government

10%

Financial Services Firm

16%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about HCL AppScan?

The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.

What needs improvement with HCL AppScan?

AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...

What is your primary use case for HCL AppScan?

The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...

What do you like most about Kiuwan?

The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.

What is your experience regarding pricing and costs for Kiuwan?

I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...

What needs improvement with Kiuwan?

Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...

SonarQube Server (formerly SonarQube) vs HCL AppScan

Comparisons

Acunetix vs HCL AppScan

Compared 14% of the time

Compared 13% of the time

Veracode vs HCL AppScan

Compared 11% of the time

Fortify on Demand vs HCL AppScan

Compared 8% of the time

PortSwigger Burp Suite Professional vs HCL AppScan

Compared 8% of the time

More HCL AppScan Competitors

SonarQube Server (formerly SonarQube) vs Kiuwan

Compared 55% of the time

Snyk vs Kiuwan

Compared 11% of the time

Veracode vs Kiuwan

Compared 9% of the time

Checkmarx One vs Kiuwan

Compared 8% of the time

Fortify on Demand vs Kiuwan

Compared 5% of the time

More Kiuwan Competitors

Product Reports

Download HCL AppScan product report

HCL AppScan

December 2024

Download Kiuwan product report

December 2024

Also Known As

IBM Security AppScan, Rational AppScan, AppScan

No data available

Learn More

HCLSoftware

Overview

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

Software analytics technology with a breadth of third party integrations that takes into account the wealth of applications your teams are currently using.

We facilitate and encourage work between unlocalized teams. We understand the complexity of working on multi technology environments, constantly striving to increase the number of programming languages and technologies we support.

Sample Customers

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial