We performed a comparison between Kiuwan and SonarQube based on real PeerSpot user reviews.
Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the time to resolution, where it tells you how long it is going to take to get to a zero-base or a five-star security rating."
"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."
"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."
"Software analytics for a lot of different languages including ABAP."
"The solution offers very good technical support."
"It provides value by offering options to enhance both code quality and the security of the company."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"The feature that I have found the most valuable in Kiuwan is the speed of scanning. Compared to other SaaS tools I have used, Kiuwan is much quicker in performing scans. I have not yet used it on a large code base, but from what I have experienced, it is efficient and accurate. Additionally, I have used it both manually and in an automated pipeline, and both methods have been effective. The speed of scanning is what makes it valuable to me."
"The solution offers a very good community edition."
"If code coverage is a low number then that's of great value to me."
"The integrations SonarQube provides with our software delivery pipeline are very seamless."
"I like that it covers most programming languages for source code review."
"I like that it's easy to navigate not just in terms of code findings but you can actually see them in the context of your source code because it gives you a copy of your code with the items that it found and highlights them. You can see it directly in your code, so you can easily go back and make the corrections in the code. It basically finds the problems for you and tells you where they are."
"SonarQube has a lot of value, it reviews the basic coding standards and security vulnerabilities of code that help to reduce issues."
"SonarQube is designed well making it easy to use, simple to identify issues and find solutions to problems."
"SonarQube is good for checking and maintaining code quality."
"DIfferent languages, such Spanish, Portuguese, and so on."
"Perhaps more languages supported."
"It could improve its scalability abilities."
"The configuration hasn't been that good."
"The product's UI has certain shortcomings, where improvements are required."
"Integration of the programming tools could be improved."
"The next release should include more flexibility in the reporting."
"I would like to see additional languages supported."
"We've been using the Community Edition, which means that we get to use it at our leisure, and they're kind enough to literally give it to us. However, it takes a fair amount of effort to figure out how to get everything up and running. Since we didn't go with the professional paid version, we're not entitled to support. Of course that could be self-correcting if we were to make the step to buy into this and really use it. Then their technical support would be available to us to make strides for using it better."
"The time it took for me to do the whole process was approximately two hours because I had to download, read the documentation, and do the configurations."
"We had some issues scanning the master branch but when we upgraded to version 7.9 we noticed it does scan the master branch but we had to do a workaround for it to happen. This process could be improved in a future release."
"The product must improve security analysis."
"The exporting capabilities could be improved. Currently, exporting is fully dependent on the SonarQube environment."
"I would like to see SonarQube implement a good amount of improvements to the product's security features. Another aspect of SonarQube that could be improved is the search functionality."
"This is a well-rounded solution, however, some features could be made available on the free version. The price of the solution could be reduced."
"The pricing could be reduced a bit. It's a little expensive."
Kiuwan is ranked 22nd in Application Security Tools with 23 reviews while SonarQube is ranked 1st in Application Security Tools with 110 reviews. Kiuwan is rated 8.6, while SonarQube is rated 8.0. The top reviewer of Kiuwan writes "Though a stable tool, the UI needs improvement". On the other hand, the top reviewer of SonarQube writes "Easy to integrate and has a plug-in that supports both C and C++ languages". Kiuwan is most compared with Checkmarx One, Snyk, Veracode, Fortify on Demand and SonarCloud, whereas SonarQube is most compared with Checkmarx One, SonarCloud, Coverity, Veracode and Snyk. See our Kiuwan vs. SonarQube report.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
