Kiuwan Insights vs Veracode comparison

Read 207 Veracode reviews

23,090 Views
4,156 Comparison Views

89% willing to recommend

Kiuwan Insights

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 19, 2024

Veracode and Kiuwan Insights compete in application security testing. Kiuwan Insights appears to have the upper hand due to its comprehensive feature set offering significant value for the price, indicating higher user satisfaction despite higher setup costs.

Features: Veracode provides software composition analysis, vulnerability tracking, and supports secure coding practices. Kiuwan Insights delivers comprehensive code quality analysis, efficient risk assessment capabilities, and a broad approach to software security, with a noticeable focus on being feature-rich though having a steeper learning curve.

Ease of Deployment and Customer Service: Veracode offers a straightforward deployment process and efficient customer support, catering to teams seeking quick integration. Kiuwan Insights might involve a more complex setup but is complemented by responsive and comprehensive customer service, favoring those who require flexible support.

Pricing and ROI: Veracode generally maintains a manageable setup cost, ideal for smaller budgets, while offering a scalable ROI. Kiuwan Insights, although more expensive upfront, promises substantial ROI through extensive analytical features, attracting businesses interested in prioritizing long-term benefits over initial cost savings.

To learn more, read our detailed Kiuwan Insights vs. Veracode Report (Updated: April 2026).

Kiuwan Insights vs. Veracode

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Kiuwan Insights

Ranking in Static Code Analysis

24th

Average Rating

4.0

Reviews Sentiment

6.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Veracode

Ranking in Static Code Analysis

1st

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

207

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (10th), Software Composition Analysis (SCA) (2nd), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of May 2026, in the Static Code Analysis category, the mindshare of Kiuwan Insights is 1.6%, up from 0.5% compared to the previous year. The mindshare of Veracode is 12.2%, down from 27.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Code Analysis Mindshare Distribution
Product	Mindshare (%)
Veracode	12.2%
Kiuwan Insights	1.6%
Other	86.2%

Static Code Analysis

Featured Reviews

Felix Esteban

Head of Development and Consulting at Logalty

Protects problematic libraries; sorely lacking in customer services

Kiuwan lacks decent support, it's very bad. A couple of years ago an American company bought Kiuwan and support became non-existent. It's a big part of why we're looking to move to another product. We have questions regarding false positives and nobody responds to our tickets. They don't have any answers. If you're looking for a cheaper solution and don't require support, it might be okay, but a large end company that has a lot of questions about how the developers are programming will have trouble.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

Onboarding developers successfully while improving code security through IDE integration

Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Insights is valuable at protecting a problematic library and enabling you to reduce the number of false positives."

"Can help in reducing the number of false positives."

"I have found the interface to be perfect."

"It changes the DevSecOps process because we find flaws much earlier in the development life cycle, and we also spot third-party software that we don't allow on developers' machines."

"The SAST and DAST modules are great."

"Veracode provides guidance for fixing vulnerabilities. It enables developers to write secure code from the start by pointing them to the problematic line of code, and saying, "This function/method has security vulnerabilities," then suggests alternatives to fix it. Then, we adopt their suggestions of the tool. By implementing it in the right way, we can fix the issue. For example, if the tool has found a method where it copied one piece of memory into another piece of memory in the code. The tool points to problematic methods with the vulnerability and provides ways to code it more securely. By adopting their suggestions, we are fixing this vulnerability."

"I like the static scanning, and Veracode's interface is excellent. The dashboard is easy to navigate."

"The solution is a specialist in SAST that you can rely on. Code scanning is fast with current, updated algorithms."

"The pricing is worth it."

"It has caught lots of flaws that could have been exploited, like SQL injection flaws. It has also improved developer engagement with information security."

"It has provided what we were looking for in such an application, meaning static application security testing functionality. That was what we were interested in."

More Veracode pros

Cons

"The solution is great, but improvement is needed in the number of lines of code allowed, that is the capacity. Pricing can be improved as well."

"Kiuwan lacks decent support, it's very bad. A couple of years ago an American company bought Kiuwan and support became non-existent."

"The solution has issues detecting intrusive methods."

"It needs more timely support for newer languages and framework versions."

"The documentation is poor and the technical support isn't helpful."

"From what we have seen of Veracode's SCA offering, it is just average."

"My advice for anybody who is interested in implementing this solution is to ensure that your technology is actually supported because the coverage is quite patchy."

"Static scanning takes a long time, so you need to patiently wait for the scan to achieve. I also think the software could be more accurate. It isn't 100 percent, so you shouldn't completely rely on Veracode. You need to manually verify its findings."

"There is room for improvement in the speed of the system. Sometimes, the servers are very busy and slow."

"Mitigation review isn't always super easy."

"Scheduling can be a little difficult. For instance, if you set up recurring scheduled scans and a developer comes in and says, "Hey, I have this critical release that happened outside of our normal release patterns and they want you to scan it," we actually have to change our schedule configuration and that means we lose the recurring scheduling settings we had."

More Veracode cons

Pricing and Cost Advice

"Pricing can be improved as well."

"Users in some forums mentioned that pricing for this solution can be quite high."

"If I compare the pricing with other software tools, then it is quite competitive. Whatever the price is, they have always given us a good discount."

"We are still considering it at the enterprise level. It has a subscription-based model. We find its price a little high based on the features it provides."

"Veracode is fairly priced."

"Compared to other similar products, the licensing and pricing are definitely competitive. If you see Checkmarx as the market leader, then we are talking about Veracode being a fraction of the cost. You also have to consider your hidden costs: you need a team to maintain it, a server, and resources. From that point of view, Veracode is great because the cost is really a fraction of many competitors."

"For enterprises, Veracode has done a fairly good job, but its pricing is not suitable for startups. The microservice distributed architecture for a startup is very small. I had to do a lot of discussions on the pricing initially. I previously worked in an enterprise organization where I used Veracode, and that's how I got to know about Veracode, but that was a big organization with more than a thousand employees. So, the cost is very different for them because the size of the application is different. Its pricing makes sense there, but when we try to onboard this solution for the startup ecosystem, pricing is not friendly. Because I knew the product and I knew its value, I onboarded it, but I don't think any other startup at our scale will onboard it."

"I think licensing needs to be changed or updated so that it works with adjustments. Pricing is expensive compared to the amount of scanning we perform."

"I don't really get too involved in the cost sides of things that's in my job, I'm more of a technical focus, but I have heard from my manager and a couple other people that the solution is quite expensive."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Code Analysis solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

16%

Manufacturing Company

11%

Computer Software Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	45
Large Enterprise	114

Questions from the Community

Ask a question

Earn 20 points

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

See all answers

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

See all answers

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

See all answers

Comparisons

OpenText Static Application Security Testing vs Kiuwan Insights

Compared 38% of the time

Checkmarx One vs Kiuwan Insights

Compared 21% of the time

More Kiuwan Insights Competitors

SonarQube vs Veracode

Compared 7% of the time

Checkmarx One vs Veracode

Compared 6% of the time

HCL AppScan vs Veracode

Compared 3% of the time

GitHub Advanced Security vs Veracode

Compared 3% of the time

OWASP Zap vs Veracode

Compared 3% of the time

More Veracode Competitors

Product Reports

Static Code Analysis

Download Kiuwan Insights product report

Download Veracode product report

Also Known As

Insights SCA

Crashtest Security , Veracode Detect

Overview

Kiuwan Insights offers cutting-edge security solutions designed to meet the needs of a tech-savvy audience. It empowers organizations to manage vulnerabilities efficiently while ensuring robust protection of software applications.

Kiuwan Insights is a versatile tool that enables IT teams to enhance application security, understand vulnerabilities, and achieve airtight security results. Built with advanced reporting and analytics capabilities, it allows for seamless integration into existing workflows while facilitating real-time risk management and compliance monitoring.

What are the key features of Kiuwan Insights?

Vulnerability Detection: Identifies security gaps in code and recommends fixes.
Code Analysis: Delivers comprehensive insights into code quality and risks.
Integration Capability: Seamlessly integrates with CI/CD pipelines and development tools.
Compliance Management: Ensures adherence to industry standards and regulations.
Real-Time Reporting: Provides instant analysis and detailed reports for informed decision-making.

What ROI or benefits should users look for in reviews?

Increased Security: Improved protection against threats and minimized vulnerabilities.
Operational Efficiency: Streamlined processes leading to time and cost savings.
Regulatory Compliance: Ensures compliance with data security standards.
Enhanced Quality: Better software quality through detailed analysis and reporting.

Implementing Kiuwan Insights in industries such as finance and healthcare allows these sectors to prioritize security due to their sensitive data handling requirements. By adopting its solutions, companies in these industries can significantly forge a pathway to enhanced protection and quality assurance, mitigating risks through tailored security measures.

Kiuwan

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Information Not Available

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

Kiuwan Insights vs. Veracode