Freedom251 › IDE Code Security Plugins
Kiuwan Code Security
What Kiuwan Code Security is
Kiuwan Code Security is a static application security testing tool for finding and prioritizing source-code vulnerabilities before production. Teams can scan locally, in CI/CD workflows, or before commits, then review findings in a dashboard. Custom rules and quality gates let teams set criteria that can fail builds for high-severity issues. Analysis can run in the cloud or on a team’s infrastructure with Kiuwan Local Analyzer; results may sync to the cloud dashboard or stay on-premises.
Kiuwan lists support for more than 30 languages, from Java, Python, JavaScript and Go to COBOL and PowerScript. Checks cover issues including injection, XSS, CSRF, broken authentication, insecure cryptography, access-control flaws and security misconfigurations. Findings map to standards such as OWASP Top 10, CWE/SANS Top 25, PCI DSS and NIST, and the product can generate compliance reports. Integrations include Jenkins, Azure DevOps, GitLab CI, IDEs and a REST API. Paid plans start at $49/user/mo (annual); there is no free plan, but a 14-day trial is available.
Who it suits
It suits development teams that want to find and address source-code vulnerabilities during development and before deployment.
What it does well
- Scans source code locally, in CI/CD, and before commits.
- Supports 30+ languages, including several legacy languages.
- Quality gates can fail builds for high-severity findings.
- Offers a 14-day trial with scanning and guided integration.
- Can generate compliance reports against listed standards.
What to know first
- No free plan is listed.
- Starter covers one application and up to two users.
- Professional starts at 10 users.
- Professional premium support is an add-on.
Limits
The free trial lasts 14 days. Starter includes one application and up to two users, with SAST for one language and basic compliance reporting; Professional starts at 10 users and supports up to 25 applications.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Starter | Billed annually; $124 per user / month · Up to 2 Users · 1 Application · SAST—1 Language, SARIF Export · Basic compliance reporting | $124 a month |
| Professional | Billed annually; $49 per user / month · 10-user minimum, scales up to 50 · Up to 25 Applications · SAST—30+ Languages · SCA/SBOM · Code Quality · Governance · CI/CD integration · On-premise deployment | $49 a month |
| Enterprise | Custom Pricing · Unlimited Users · Unlimited Applications · Priority support · Dedicated product roadmap sessions · Increased data retention | On request |
As kiuwan.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Kiuwan website.
- Start the free 14-day trial, which includes guided integration.
- Choose cloud analysis or use Kiuwan Local Analyzer on your infrastructure.
- Connect a listed CI/CD, IDE, or CLI-supported tool, or use the REST API.
- Run a scan and review findings in the dashboard or keep results on-premises.
Verdict
Kiuwan Code Security combines source scanning, customizable rules, quality gates and compliance reporting, with both cloud and on-premises analysis options. Consider the listed user and application limits when choosing a plan; pricing starts at $49/user/mo (annual), and a 14-day trial is available.
Questions
How much does Kiuwan Code Security cost?
Paid plans start at $49/user/mo, billed annually. Enterprise pricing is custom.
Is there a free plan or trial?
There is no free plan. A free 14-day trial includes vulnerability scanning, a compliance overview, guided integration, and access to 30+ languages.
Which platforms does it support?
Listed platforms are API, Linux, macOS, self-hosted, web, and Windows.
Which languages can it scan?
Kiuwan lists support for 30+ languages, including Java, Python, JavaScript, C#, Go, Swift, COBOL, RPG4, Natural, and PowerScript.
Does it integrate with CI/CD and IDE tools?
Listed integrations include Jenkins, Azure DevOps, GitLab CI, Visual Studio, VS Code, Eclipse, JetBrains, and a REST API. Its CLI is described as working with GitHub Actions, CircleCI, and TeamCity.
What are the plan limits?
Starter includes up to two users and one application. Professional starts at 10 users and supports up to 25 applications; Enterprise has unlimited users and applications.
Facts from Kiuwan Code Security's own pages
- Audience
- The Code Security page describes the product for development teams seeking to detect and remediate vulnerabilities during development and before deployment. · kiuwan.com, 4 Oct 2026
- Company history
- Kiuwan says it was founded in Spain in 2003, acquired by Idera in 2018, and is now part of Sembi. · kiuwan.com, 4 Oct 2026
- Deployment
- Teams can analyze code in the cloud or use Kiuwan Local Analyzer on their infrastructure; results can sync to the cloud dashboard or remain on-premises. · kiuwan.com, 4 Oct 2026
- Detected issues
- The product page lists detection for SQL, XML, and OS command injection, XSS, CSRF, broken authentication, insecure cryptography, access-control flaws, and security misconfigurations. · kiuwan.com, 4 Oct 2026
- Founded
- 2003 · kiuwan.com, 28 Sept 2026
- Integrations
- Listed integrations include Jenkins, Azure DevOps, GitLab CI, Visual Studio, VS Code, Eclipse, JetBrains, and a REST API; the CLI is described as working with GitHub Actions, CircleCI, and TeamCity. · kiuwan.com, 4 Oct 2026
- Language coverage
- The site lists support for 30+ languages, including Java, Python, JavaScript, C#, Go, Swift, and legacy languages such as COBOL, RPG4, Natural, and PowerScript. · kiuwan.com, 4 Oct 2026
- Pricing limits
- Starter includes one application and up to two users, while Professional starts at 10 users and supports up to 25 applications. · kiuwan.com, 4 Oct 2026
- Product scope
- Kiuwan Code Security is the SAST product; Kiuwan also lists separate Software Composition Analysis, Code Quality, and Governance products or add-ons. · kiuwan.com, 4 Oct 2026
- Scanning workflow
- It supports local and CI/CD scans, dashboard review, pre-commit analysis, customizable rules, and quality gates that can fail builds for high-severity findings. · kiuwan.com, 4 Oct 2026
- Standards and reporting
- Findings map to OWASP Top 10, CWE/SANS Top 25, PCI DSS, CERT, MISRA, NIST, and ISO/IEC 25000, and the product can generate compliance reports. · kiuwan.com, 4 Oct 2026
- Support
- Enterprise pricing includes priority support, and the plan comparison lists premium support as an add-on for Professional and Enterprise. · kiuwan.com, 4 Oct 2026
- Trial
- The maker offers a free 14-day trial that includes vulnerability scanning, a compliance overview, guided integration, and access to 30+ languages. · kiuwan.com, 4 Oct 2026
- What it does
- Kiuwan Code Security is a SAST tool that finds and prioritizes source-code vulnerabilities and provides remediation guidance before production. · kiuwan.com, 4 Oct 2026
Where Kiuwan Code Security stands on Freedom251
- IDE Code Security Plugins#6 of 19
- Vulnerability Scanner Software#12 of 29
- SAST Tools#16 of 26
- Code Quality Management Software#17 of 26