What Qwiet is
Qwiet takes a unique approach to scanning that starts with a map of your application, and scans within that context. They have smart prioritization filters combined with the standard suite of SCA, container, SAST, Secrets, and IaC scanning. They don't offer "pipeline-less" scanning via webhooks if that's a requirement for you. The vendor site is www.qwiet.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Qwiet covers
Qwiet is in the catalog for these capabilities. Categories: SCA, ASPM, SAST, Container Vulnerability, Secret Scanning, and IaC. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate Qwiet in a security program
Use Qwiet as a stack candidate, not as diligence evidence. The oneNorma score for Qwiet is 3.8/10 (percentile 9). If the real gap is in SCA, ASPM, SAST, Container Vulnerability, Secret Scanning, and IaC, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.qwiet.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.
