What Kiuwan is
Kiuwan offers some uniquely good SAST detection results, at the price of an unintuitive UI/UX. Kiuwan's scanning offered some of the most robust true positives we've seen, but they really dragged in terms of their implementation processes, UI, and integration/maintenance of developer workflows. The vendor site is www.kiuwan.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Kiuwan covers
Kiuwan is in the catalog for these capabilities. Categories: SAST. Catalog tags: Hands-on and Nerdy.
How to evaluate Kiuwan in a security program
Use Kiuwan as a stack candidate, not as diligence evidence. The oneNorma score for Kiuwan is 4.3/10 (percentile 21). If the real gap is in SAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.kiuwan.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
