Try our new research platform with insights from 80,000+ expert users

Kiuwan vs SonarQube Server (formerly SonarQube) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kiuwan
Ranking in Application Security Tools
28th
Ranking in Static Application Security Testing (SAST)
26th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
23
Ranking in other categories
No ranking in other categories
SonarQube Server (formerly ...
Ranking in Application Security Tools
1st
Ranking in Static Application Security Testing (SAST)
1st
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
114
Ranking in other categories
Software Development Analytics (1st)
 

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of Kiuwan is 1.1%, up from 1.0% compared to the previous year. The mindshare of SonarQube Server (formerly SonarQube) is 24.5%, down from 27.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Mustufa Bhavnagarwala - PeerSpot reviewer
Though a stable tool, the UI needs improvement
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran the tool and tried to scan the repository to find the security issues. The product's UI has certain shortcomings, where improvements are required.
Chetan Jayatheertha - PeerSpot reviewer
Has a great quality gate feature and improves the code coverage in your core base
We would like to have more visibility and more documentation, starting with the installation. It needs to be more standardized and explain all the features. We'd also like to get an idea of the level of stability we can get for our larger-sized projects. The notifications from the channel queue can be improved including email notifications. We currently rely on getting those notifications passed onto us and that should not be the case. The customization of different languages would also be helpful. If all the above could be implemented, SonarQube would be the best vulnerability security scanning tool.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Lifecycle features, because they permit us to show non-technical people the risk and costs hidden into the code due to bad programming practices."
"​We use Kiuwan to locate the source of application vulnerabilities."
"The solution offers very good technical support."
"I personally like the way it breaks down security vulnerabilities with LoC at first glance."
"I like that I can scan the code without sending it to the Kiuwan cloud. I can do it locally on my device. When the local analyzer finishes, the results display on the dashboard in the cloud. It's essential for security purposes to be able to scan my code locally."
"I've found the reporting features the most helpful."
"I find it immensely helpful because it's not just about generating code; it's about ensuring efficiency in the execution."
"I like that it provides a detailed report that lets you know the risk index and the vulnerability."
"The most valuable feature is the security hotspot feature that identifies where your code is prone to have security issues."
"Strong code evaluation for budget-minded clients."
"It is a very good tool for analysis and security vulnerability checking."
"It is very good at identifying technical debt."
"Offers multi-programming language support"
"This has improved our organization because it has helped to find Security Vulnerabilities."
"Using SonarQube benefits us because we are able to avoid the inclusion of malware in our applications."
"The solution has a wide variety of features and an open-source community that you are able to learn Java, JavaScript, or any other programing language."
 

Cons

"The product's UI has certain shortcomings, where improvements are required."
"The integration process could be improved. It'll also help if it could generate reports automatically. But I'm not sure about the effectiveness of the reports. This is because, in our last project, we still found some key issues that weren't captured by the Kiuwan report."
"The development-to-delivery phase."
"Kiuwan's support has room for improvement. You can only open a ticket is through email, and the support team is outside of our country. They should have a support number or chat."
"It would be beneficial to streamline calls and transitions seamlessly for improved functionality."
"DIfferent languages, such Spanish, Portuguese, and so on."
"The next release should include more flexibility in the reporting."
"I would like to see better integration with the Visual Studio and Eclipse IDEs."
"We could use some team support, but since we are using the community version, it's not available."
"From a reporting perspective, we sometimes have problems interpreting the vulnerability scan reports. For example, if it finds a possible threat, our analysts have to manually check the provided reports, and sometimes we have issues getting all the data needed to properly verify if it's accurate or not."
"We did have some trouble with the LDAP integration for the console."
"One thing to improve would be the integration. There is a steep learning curve to get it integrated."
"I have found this solution creates more noise than competitors."
"Expression of common vulnerabilities and exposures is not always current."
"SonarQube could be improved by implementing inter-procedural code analysis capabilities, allowing for a more comprehensive detection of defects and vulnerabilities across the entire codebase."
"SonarQube's detail in the security could be improved. It may be helpful to have additional details, with regards to Oracle PL/SQL. For example, it's neither as built nor as thorough as Java. For now, this is the only additional feature I would like to see."
 

Pricing and Cost Advice

"Check with your account manager."
"Nothing special. It's a very fair model."
"It follows a subscription model. I think the price is somewhere in the middle."
"Kiuwan is an open-source solution and free to use."
"I recommend contacting a sales person who will create the best plan payment plan for you, as we did."
"This solution is cheaper than other tools."
"The price of Kiuwan is lower than that of other tools on the market."
"We use the free version; there are no hidden costs or licensing required."
"Can try developer version for 14 days on the free trial."
"On the pricing side, it's 3,000 Euros for 1 million lines of code."
"The development license cost is reasonable, and we've had no concerns about SonarQube when it comes to cost."
"It's a bit expensive for us. The currency rate of the dollar is a problem but it may be fine for other countries."
"We did not purchase a license (required for C++ support), but this option was considered."
"We use the solution free of cost."
"SonarQube is a fairly affordable solution for a larger scale if you have a specific role or specific department for secure code."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
851,491 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
14%
Manufacturing Company
7%
Comms Service Provider
6%
Financial Services Firm
17%
Computer Software Company
15%
Manufacturing Company
13%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Kiuwan?
The most valuable feature of the solution stems from the fact that it is quick when processing and giving an output or generating a report.
What is your experience regarding pricing and costs for Kiuwan?
I'm not entirely sure about the price and business aspects, but I assume Checkmarx might be less expensive. I think Checkmarx might offer more affordable options, especially in its smaller business...
What needs improvement with Kiuwan?
Kiuwan can improve its UI a little more. The user experience can be made better. Kiuwan offers a user interface that is similar to the one offered by Windows 7 or Windows 98, which I saw when I ran...
Is SonarQube the best tool for static analysis?
I am not very familiar with SonarQube and their solutions, so I can not answer. But if you are asking me about which tools that are the best for for Static Code Analysis, I suggest you have a look...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
 

Also Known As

No data available
Sonar
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

DHL, BNP Paribas, Zurich, AXA, Ernst & Young, KFC, Santander, Latam, Ferrovial
Information Not Available
Find out what your peers are saying about Kiuwan vs. SonarQube Server (formerly SonarQube) and other solutions. Updated: April 2025.
851,491 professionals have used our research since 2012.