Kiuwan Code Security

Kiuwan Code Security

Kiuwan
4.5 out of 5 stars
CodeScan Kiuwan Code Security

Related Products

  • Aikido Security
    4.6 out of 5 stars 367 Ratings
    Visit Website for Aikido Security
  • Parasoft
    4.6 out of 5 stars 152 Ratings
    Visit Website for Parasoft
  • TrustInSoft Analyzer
    4.3 out of 5 stars 6 Ratings
    Visit Website for TrustInSoft Analyzer
  • Feroot
    4.9 out of 5 stars 33 Ratings
    Visit Website for Feroot
  • Gearset
    4.7 out of 5 stars 305 Ratings
    Visit Website for Gearset
  • Docmosis
    4.9 out of 5 stars 51 Ratings
    Visit Website for Docmosis
  • Knak
    4.7 out of 5 stars 169 Ratings
    Visit Website for Knak
  • Flagsmith
    4.8 out of 5 stars 43 Ratings
    Visit Website for Flagsmith
  • JS7 JobScheduler
    5.0 out of 5 stars 1 Rating
    Visit Website for JS7 JobScheduler
  • TIMi
    4.9 out of 5 stars 68 Ratings
    Visit Website for TIMi
CodeScan:

About

Code Quality and Security for Salesforce Developers. Made exclusively for the Salesforce platform, CodeScan’s code analysis solutions provide you with total visibility into your code health. The most comprehensive static code analysis solution supporting Salesforce languages and metadata. Self hosted. Check your code for security and quality with the most extensive database for the salesforce platform. Cloud. Get all the benefits of our self hosted service without the need of servers or internal infrastructure. Editor plugins. Plug in codescan to your favorite editor and get real-time feedback while you code. Define code standards. Maintain the quality of your code according to best practices. Control code quality. Enforce your coding standards and minimize code complexity throughout the development process. Reduce technical debt. Track your technical debt to improve your code quality and efficiency. Increase development productivity.
Kiuwan Code Security:

About

Kiuwan is an end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. Integrating into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. ✅ Large language support: 30+ programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation Code Smarter. Secure Faster. Ship Sooner.
CodeScan:

Platforms Supported

Windows Supported
Mac Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported
Kiuwan Code Security:

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported
CodeScan:

Audience

Salesforce developers interested in a static code analysis solution to save time and increase productivity
Kiuwan Code Security:

Audience

Financial institutions, Insurance Companies, Healthcare, Cyber Security, Investment Platforms, Transaction Services, ECommerce
CodeScan:

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported
Kiuwan Code Security:

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported
CodeScan:

API

Offers API Supported
Kiuwan Code Security:

API

Offers API Supported
CodeScan:

Screenshots and Videos

Kiuwan Code Security:

Screenshots and Videos

CodeScan:

Pricing

$250 per month
Free Version Not Supported
Free Trial Supported
Kiuwan Code Security:

Pricing

For both Code Security and Insights pricing is accessible on request, scans and continuous scanning is available.
Free Version Not Supported
Free Trial Not Supported
CodeScan:

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software
Kiuwan Code Security:

Reviews/Ratings

Overall 4.5 / 5
ease 4.7 / 5
features 4.2 / 5
design 4.3 / 5
support 3.7 / 5
Kiuwan Code Security:

Pros & Cons from Real Users

Pros

  • The number of languages supported. The white-labeled branding capability. The relatively good ease of use. Customer interface, access to run analysis and review reports.
  • The product is very easy to use. I was asked to try this out with not much information and was able to get the first scan in with not much struggle at all.
  • We find very valuable to allow Kiuwan integrate with our development lifecycle (CI/CD) and we don't have to google or find fixes since it recommends fixes and tells you exactly where to find the issue within the code.
  • Very accurate analysis provided by Kiuwan on code risks. The best is that Kiuwan even provides the recommended fix which makes the remediation process easier and faster.
  • I've tried some products (even free like Snyk) and Kiuwan provides a full picture of static code risks and vulnerabilities. It allows team to improve code security and development practices.

Cons

  • Confusing administration with challenging setup. No ability to export mute, notes, and comments. No way to export and remove an application and re-import the results, mutes, notes back into the portal. There should be a setup timing of allowing an application to be reviewed for 15 or 30 days before data is stale and should be removed. Need a comparison to the previous quarter, month, or year's results. This will show maturity and improvement over time.
  • I think a bit more customization in how to select the source for scanning would be great (exclude/include pattern, different set of rules for different source types, etc).
  • False positives take time to turn off since its a manual process and the tools somehow lacks intelligence to detect whether the issue is real or not (e.g. hardcoded passwords are the most likely under this).
  • If they had to improve I'd suggest working on support. Sometimes support takes time to get back. Also, we've gone through platform upgrades and we weren't notified and broke our development cycles. Would be good to improve customer notifications somehow.
  • It's not a CON being honest but would be nice if they could offer something to scan infrastructure like Tenable.sc does.
CodeScan:

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported
Kiuwan Code Security:

Training

Documentation Supported
Webinars Supported
Live Online Not Supported
In Person Not Supported
CodeScan:

Company Information

CodeScan
Founded: 2014
United States
codescan.io
Kiuwan Code Security:

Company Information

Kiuwan
Founded: 2012
Spain
www.kiuwan.com
CodeScan:

Alternatives

SonarQube Server

SonarQube Server

SonarSource
5.0 out of 5 stars
Kiuwan Code Security:

Alternatives

Revenera SCA

Revenera SCA

Revenera
CodeScan:
Kiuwan Code Security:
Xygeni

Xygeni

Xygeni Security
5.0 out of 5 stars
CodeScan:
Kiuwan Code Security:
Aikido Security

Aikido Security

4.6 out of 5 stars
CodeScan:
Kiuwan Code Security

Kiuwan Code Security

Kiuwan
4.5 out of 5 stars
Kiuwan Code Security:
CodeScan:
SonarQube Cloud

SonarQube Cloud

SonarSource
Kiuwan Code Security:
CodeScan:

Categories

Kiuwan Code Security:

Categories

CodeScan:

DevOps Features

Approval Workflow Not Supported
Dashboard Supported
KPIs Not Supported
Policy Management Not Supported
Portfolio Management Not Supported
Prioritization Not Supported
Release Management Supported
Timeline Management Not Supported
Troubleshooting Reports Not Supported

Source Code Management Features

Access Controls/Permissions Not Supported
Bug Tracking Supported
Build Automation Not Supported
Change Management Not Supported
Code Review Supported
Collaboration Supported
Continuous Integration Supported
Repository Management Not Supported
Version Control Not Supported
Kiuwan Code Security:

IT Security Features

Anti Spam Not Supported
Anti Virus Not Supported
Email Attachment Protection Not Supported
Event Tracking Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Not Supported
IP Protection Not Supported
Spyware Removal Not Supported
Two-Factor Authentication Not Supported
Vulnerability Scanning Supported
Web Threat Management Not Supported
Web Traffic Reporting Not Supported

Static Code Analysis Features

Analytics / Reporting Supported
Code Standardization / Validation Not Supported
Multiple Programming Language Support Supported
Provides Recommendations Supported
Standard Security/Industry Libraries Not Supported
Vulnerability Management Supported

Vulnerability Scanners Features

Asset Discovery Not Supported
Black Box Scanning Not Supported
Compliance Monitoring Not Supported
Continuous Monitoring Not Supported
Defect Tracking Not Supported
Interactive Scanning Not Supported
Logging and Reporting Not Supported
Network Mapping Not Supported
Perimeter Scanning Not Supported
Risk Analysis Supported
Threat Intelligence Supported
Web Inspection Not Supported
CodeScan:

Integrations

Bitbucket Supported
GitLab Supported
Java Supported
Microsoft Azure Supported
Apache Groovy Not Supported
C# Not Supported
CLion Not Supported
HTML Not Supported
IBM i Not Supported
JavaScript Not Supported
Kotlin Not Supported
OWASP Threat Dragon Not Supported
PHP Not Supported
PyCharm Not Supported
Scala Not Supported
TypeScript Not Supported
Visual Basic Not Supported
Visual Studio Not Supported
WebStorm Not Supported
WordPress Not Supported
Kiuwan Code Security:

Integrations

Bitbucket Supported
GitLab Supported
Java Supported
Microsoft Azure Supported
Apache Groovy Supported
C# Supported
CLion Supported
HTML Supported
IBM i Supported
JavaScript Supported
Kotlin Supported
OWASP Threat Dragon Supported
PHP Supported
PyCharm Supported
Scala Supported
TypeScript Supported
Visual Basic Supported
Visual Studio Supported
WebStorm Supported
WordPress Supported
CodeScan:
Claim CodeScan and update features and information
Claim CodeScan and update features and information
Kiuwan Code Security:
Claim Kiuwan Code Security and update features and information
Claim Kiuwan Code Security and update features and information