Kiuwan Code Security
kiuwan.com
What it is
Kiuwan Code Security is a static application security testing tool that identifies and prioritizes source-code vulnerabilities and offers remediation guidance before production. Teams can scan locally or in CI/CD, review findings in a dashboard, run pre-commit analysis, customize rules and configure quality gates to fail builds for high-severity issues. Code analysis can run in the cloud or through Kiuwan Local Analyzer on team infrastructure; results can sync to the cloud dashboard or remain on-premises. Kiuwan lists support for more than 30 languages, including Java, Python, JavaScript, C#, Go and legacy languages such as COBOL and RPG4. Listed detections include injection flaws, XSS, CSRF, broken authentication, insecure cryptography and access-control problems. Findings map to standards including OWASP Top 10, CWE/SANS Top 25, PCI DSS, NIST and ISO/IEC 25000, with compliance reports available. Integrations include Jenkins, Azure DevOps, GitLab CI, developer tools and a REST API. A free 14-day trial is offered. Professional starts at $49 per user / month, billed annually, with a 10-user minimum; Starter is listed at $124 per user / month, billed annually.
Spec sheet
- What it does
- Kiuwan Code Security is a SAST tool that finds and prioritizes source-code vulnerabilities and provides remediation guidance before production.Read 4 Oct 2026 · kiuwan.com
- Audience
- The Code Security page describes the product for development teams seeking to detect and remediate vulnerabilities during development and before deployment.Read 4 Oct 2026 · kiuwan.com
- Deployment
- Teams can analyze code in the cloud or use Kiuwan Local Analyzer on their infrastructure; results can sync to the cloud dashboard or remain on-premises.Read 4 Oct 2026 · kiuwan.com
- Trial
- The maker offers a free 14-day trial that includes vulnerability scanning, a compliance overview, guided integration, and access to 30+ languages.Read 4 Oct 2026 · kiuwan.com
- Integrations
- Listed integrations include Jenkins, Azure DevOps, GitLab CI, Visual Studio, VS Code, Eclipse, JetBrains, and a REST API; the CLI is described as working with GitHub Actions, CircleCI, and TeamCity.Read 4 Oct 2026 · kiuwan.com
- Support
- Enterprise pricing includes priority support, and the plan comparison lists premium support as an add-on for Professional and Enterprise.Read 4 Oct 2026 · kiuwan.com
- Founded
- 2003Read 28 Sep 2026 · kiuwan.com
- Company history
- Kiuwan says it was founded in Spain in 2003, acquired by Idera in 2018, and is now part of Sembi.Read 4 Oct 2026 · kiuwan.com
- Detected issues
- The product page lists detection for SQL, XML, and OS command injection, XSS, CSRF, broken authentication, insecure cryptography, access-control flaws, and security misconfigurations.Read 4 Oct 2026 · kiuwan.com
- Language coverage
- The site lists support for 30+ languages, including Java, Python, JavaScript, C#, Go, Swift, and legacy languages such as COBOL, RPG4, Natural, and PowerScript.Read 4 Oct 2026 · kiuwan.com
- Pricing limits
- Starter includes one application and up to two users, while Professional starts at 10 users and supports up to 25 applications.Read 4 Oct 2026 · kiuwan.com
- Product scope
- Kiuwan Code Security is the SAST product; Kiuwan also lists separate Software Composition Analysis, Code Quality, and Governance products or add-ons.Read 4 Oct 2026 · kiuwan.com
- Scanning workflow
- It supports local and CI/CD scans, dashboard review, pre-commit analysis, customizable rules, and quality gates that can fail builds for high-severity findings.Read 4 Oct 2026 · kiuwan.com
- Standards and reporting
- Findings map to OWASP Top 10, CWE/SANS Top 25, PCI DSS, CERT, MISRA, NIST, and ISO/IEC 25000, and the product can generate compliance reports.Read 4 Oct 2026 · kiuwan.com
Plans and prices
Strong points and limits
Strong points
- Supports more than 30 programming languages
- Quality gates can fail builds for severe findings
- Offers cloud and on-premises analysis
- Maps findings to security standards and frameworks
- Provides a free 14-day trial
Limits
- No free plan
- Professional has a 10-user minimum
- Starter is limited to one application and two users
Who it suits
Kiuwan Code Security suits development teams seeking to find and address source-code vulnerabilities during development and before deployment. Teams can choose cloud analysis or on-premises analysis with Kiuwan Local Analyzer.
Verdict
Kiuwan Code Security offers scanning, customizable rules and build gates across cloud or on-premises workflows. Review the plan limits carefully: Starter is constrained to one application, while Professional begins at 10 users.
Where Specifiction places it
- IDE Code Security Plugins#4 of 198.2
- SAST Tools#7 of 268.2
- Vulnerability Scanner Software#10 of 298.3
- Code Quality Management Software#14 of 268.2