- Home
- IDE Code Security Plugins
- Kiuwan Code Security
Kiuwan Code Security
What it is
Kiuwan Code Security is a static application security testing (SAST) tool for finding and prioritizing source-code vulnerabilities before production. It supports local, pre-commit, and CI/CD scans, dashboard review, customizable rules, and quality gates that can fail builds when findings are high severity. Teams can analyze code in Kiuwan’s cloud or use Kiuwan Local Analyzer on their own infrastructure, keeping results synchronized to the cloud or on-premises. The product lists support for more than 30 languages, including Java, Python, JavaScript, C#, Go, Swift, COBOL, RPG4, Natural, and PowerScript. Listed detections include injection flaws, cross-site scripting, broken authentication, insecure cryptography, access-control issues, and security misconfigurations. Findings map to OWASP Top 10, CWE/SANS Top 25, PCI DSS, CERT, MISRA, NIST, and ISO/IEC 25000, with compliance reports. Integrations include CI/CD systems, IDEs, and a REST API. A 14-day trial is available.
For and against
For
- Supports 30+ programming languages
- Local and CI/CD scanning workflows
- Custom rules and quality gates
- IDE, pipeline, and REST integrations
- 14-day free trial available
Against
- No free plan
- Starter supports one application
- Professional requires 10 users
The verdict
Kiuwan Code Security combines source scanning, workflow controls, broad language coverage, and compliance mapping. Review the plan limits and paid structure against your team size before choosing it.
Who it suits
It suits development teams that want vulnerability detection and remediation guidance during development and before deployment. It also fits organizations needing CI/CD integration, on-premises analysis, or compliance reporting.
Plans and prices
Professional
10-user minimum, scales up to 50 · Up to 25 Applications · SAST—30+ Languages · SCA/SBOM
Read 4 Oct 2026 · kiuwan.com
Starter
Up to 2 Users · 1 Application · SAST—1 Language, SARIF Export · Basic compliance reporting
Read 4 Oct 2026 · kiuwan.com
Enterprise
Unlimited Users · Unlimited Applications · Priority support · Dedicated product roadmap sessions
Read 4 Oct 2026 · kiuwan.com
On the record
- Audience
- The Code Security page describes the product for development teams seeking to detect and remediate vulnerabilities during development and before deployment.kiuwan.com · read 4 Oct 2026
- Company history
- Kiuwan says it was founded in Spain in 2003, acquired by Idera in 2018, and is now part of Sembi.kiuwan.com · read 4 Oct 2026
- Deployment
- Teams can analyze code in the cloud or use Kiuwan Local Analyzer on their infrastructure; results can sync to the cloud dashboard or remain on-premises.kiuwan.com · read 4 Oct 2026
- Detected issues
- The product page lists detection for SQL, XML, and OS command injection, XSS, CSRF, broken authentication, insecure cryptography, access-control flaws, and security misconfigurations.kiuwan.com · read 4 Oct 2026
- Integrations
- Listed integrations include Jenkins, Azure DevOps, GitLab CI, Visual Studio, VS Code, Eclipse, JetBrains, and a REST API; the CLI is described as working with GitHub Actions, CircleCI, and TeamCity.kiuwan.com · read 4 Oct 2026
- Language coverage
- The site lists support for 30+ languages, including Java, Python, JavaScript, C#, Go, Swift, and legacy languages such as COBOL, RPG4, Natural, and PowerScript.kiuwan.com · read 4 Oct 2026
- Pricing limits
- Starter includes one application and up to two users, while Professional starts at 10 users and supports up to 25 applications.kiuwan.com · read 4 Oct 2026
- Product scope
- Kiuwan Code Security is the SAST product; Kiuwan also lists separate Software Composition Analysis, Code Quality, and Governance products or add-ons.kiuwan.com · read 4 Oct 2026
- Scanning workflow
- It supports local and CI/CD scans, dashboard review, pre-commit analysis, customizable rules, and quality gates that can fail builds for high-severity findings.kiuwan.com · read 4 Oct 2026
- Standards and reporting
- Findings map to OWASP Top 10, CWE/SANS Top 25, PCI DSS, CERT, MISRA, NIST, and ISO/IEC 25000, and the product can generate compliance reports.kiuwan.com · read 4 Oct 2026
- Support
- Enterprise pricing includes priority support, and the plan comparison lists premium support as an add-on for Professional and Enterprise.kiuwan.com · read 4 Oct 2026
- Trial
- The maker offers a free 14-day trial that includes vulnerability scanning, a compliance overview, guided integration, and access to 30+ languages.kiuwan.com · read 4 Oct 2026
- What it does
- Kiuwan Code Security is a SAST tool that finds and prioritizes source-code vulnerabilities and provides remediation guidance before production.kiuwan.com · read 4 Oct 2026
