|
Attribute
|
Essential
|
Advanced
|
Kiuwan
|
|
Focus
|
In-house scanners
|
||
|
Extras
|
None
|
None
|
Code quality
|
| Headcount | 25 | ||
| Headcount distribution |
Engineering 42%, IT 14%, sales 15%, marketing 2%, operations 4% and others 25%
|
Engineering 8%, IT 8%, sales 24%, operations 12% and others 48% | |
| Headcount growth |
+14%, +15%, -1%
|
0%, -4%, -19%
|
|
|
Headquarters
|
CO
and US
|
ES and US
|
|
|
Countries
|
AR, BO, CA, CL, CO, DO, MX, PA, PE and US
|
ES and US
|
|
|
Reputation
|
Same
|
9.16 from 93 reviews over 9 years on Capterra, G2, Gartner and
PeerSpot
|
|
|
Followers
|
Same
|
7K based on the following: Facebook, LinkedIn, X and YouTube
|
|
| Research firms |
None
|
None
|
None
|
|
Founded
|
2001 |
2012
|
|
|
Funding
|
Bootstrapped
|
Same
|
No information available
|
|
Acquisitions
|
None
|
None
|
Acquired 1 time and made 0 acquisitions
|
|
Revenue
|
10M
to 15M
|
1M to 15M
|
|
| CVEs as CNA Researcher |
Not applicable, as it is not a CNA Researcher
|
||
|
Compliance
|
SOC 2 Type II
and
SOC 3
|
None
|
|
| Bug bounty |
No
|
||
|
Visits
|
27K
per month. Top 3: 34% PE, 33% CO, 6% CL. Others 27%
|
21K per month. Top 3: 53% ES, 12% UA, 11% PY. Others 24%
|
|
|
Authority
|
32 out of 100
|
||
|
Public vulnerability DB
|
Discovered
and third-party
|
None
|
|
|
Content
|
Same
|
Blog, documentation, e-books and webinars
|
|
|
Comprehensive documentation
|
13
documentation sections, 6 in common and 7 additional
|
6 documentation sections, all in common
|
|
|
Community
|
No
|
||
|
Sync training
|
1
workshop
|
No
|
|
|
Async training
|
3
product use courses, all free
|
No
|
|
|
Distribution
|
Same
|
Direct or with any of its 13 partners
|
|
| Marketplaces | None | ||
|
Freemium
|
No
|
No
|
No
|
|
Free trial
|
14-day free trial
|
||
|
Demo
|
Yes
|
||
| Open demo |
No
|
No
|
No
|
|
Pricing
|
Contact sales
|
||
|
Pricing tiers
|
1
plan
|
1
plan
|
2 plans (Kiuwan SAST and Kiuwan SCA)
|
|
Minimum term
|
Annually
|
||
|
Minimum payment period
|
Annually
|
||
|
Minimum capabilities
|
ASPM, binary SAST, DAST, IaC, SAST, SCA and secrets
|
Same plus:
AI SAST, API security testing, PTaaS, RE and SCR
|
SAST or SCA
|
|
Minimum scope
|
1
author
|
No information available
|
|
|
Pricing drivers
|
Applications
|
||
|
Free implementation
|
No
|
||
|
Free support
|
Yes
|
|
Attribute
|
Essential
|
Advanced
|
Kiuwan
|
|
PTaaS
|
No
|
No
|
|
|
Reverse engineering
|
No
|
No | |
|
Secure code review
|
No
|
No
|
|
|
Pivoting
|
No
|
No
|
|
|
Exploitation
|
No
|
No
|
|
|
Manual reattacks
|
Not applicable
|
Not applicable
|
|
|
Zero-day vulnerabilities
|
None
|
Continuous
zero-day
vulnerability research
|
None
|
|
SLA
|
No | ||
|
Minimum availability
|
99.95%
per minute LTM
|
None
|
|
|
After-sale guarantees
|
No
|
Yes
|
Yes
|
|
Accreditations
|
None
|
||
|
Hacker certifications
|
Not applicable
|
Not applicable
|
|
|
Type of contract
|
Employee
|
Same
|
Employee
|
|
Endpoint control
|
Not applicable
|
Not applicable
|
|
|
Channel control
|
Not applicable
|
Total
|
Not applicable
|
|
Standards
|
Some requirements from 65
standards, 15 in common and 50 additional
|
All requirements from the same
standards
|
19 standards, 15 in common and 4 additional
|
|
Detection method
|
Automated tools,
AI
and human intelligence
|
Automated tools
|
|
|
False positives
|
158.34 times better
|
249.06 times better
|
0.37% F0.5 score per quantity
|
|
False negatives
|
35.25 times better
|
101.36 times better
|
0.76% F2.0 score per severity
|
|
Remediation
|
5, 2 in common and 3 additional
|
Same, plus
1
|
2, all in common
|
|
Outputs
|
5, 2 in common and 3 additional
|
Same, plus
2
|
4, 2 in common and 2 additional
|
|
Attribute
|
Essential |
Advanced
|
Kiuwan
|
|
ASPM
|
No
|
||
|
API
|
REST with JSON
|
||
|
IDE
|
5
functionalities, 1 in common and 4 additional
|
Same, plus 1 functionality
|
2 functionalities, 1 in common and 1 additional
|
|
CLI
|
Yes
|
||
|
CI/CD
|
Breaks the build
|
||
|
Vulnerability sources
|
4
sources, none in common
|
1 source
|
|
|
Threat model alignment
|
No
|
||
|
Priority criteria
|
CVSS v3.0
|
||
|
Custom prioritization
|
No
|
||
|
Scanner origin
|
In-house
|
||
|
SCA
|
19 package managers, 9 in common and 10 additional
|
12 package managers, 9 in common and 3 additional
|
|
|
AI security
|
No
|
No
|
|
|
Reachability
|
12
languages
|
No
|
|
|
Reachability type
|
Not applicable
|
||
|
SBOM
|
22
package managers, 6 in common and 16 additional
|
12 package managers, 6 in common and 6 additional | |
|
Malware detection
|
Yes
|
Yes
|
No
|
|
Autofix on components
|
No
|
No
|
No
|
|
Source SAST (languages)
|
12, 11 in common and 1 additional
|
27, 11 in common and 16 additional
|
|
|
Source SAST (frameworks)
|
22, 1 in common and 21 additional
|
5, 1 in common and 4 additional
|
|
|
Custom rules
|
No
|
No
|
Quality models
|
|
IaC
|
No
|
||
|
Binary SAST
|
1 type of
binary
|
No
|
|
|
DAST
|
No
|
||
|
API security testing
|
No
|
No
|
|
|
IAST
|
No
|
No
|
No
|
|
ASM
|
No
|
No
|
No
|
|
Secrets
|
Same, plus verify other attack vectors and secrets exploitability
|
No
|
|
|
AI
|
3
functions
|
No | |
|
MCP
|
No
|
||
| Open-source |
Not applicable
|
No
|
|
| Provisioning as code |
No
|
||
|
Deployment
|
SaaS + on-premises (no tenancy information)
|
||
| Regions |
No information available
|
||
|
Status
|
No
|
||
|
Incidents
|
No information available
|
|
Attribute
|
Essential
|
Advanced
|
Kiuwan
|
|
SCM
|
None
|
||
|
Binary repositories
|
None
|
None
|
None
|
|
Ticketing
|
3, 2 in common and 1 additional
|
1 in common
|
|
|
ChatOps
|
None |
None
|
None |
|
IDE
|
2, all in common
|
9, 2 in common and 7 additional
|
|
|
CI/CD
|
20, 7 in common and 13 additional
|
8, 7 in common and 1 additional
|
|
|
SCA
|
Native
|
||
|
SAST
|
Native
|
||
|
DAST
|
None
|
||
|
IAST
|
None |
None
|
None
|
|
Cloud
|
None
|
||
|
Secrets
|
None
|
||
|
Remediation
|
None
|
None
|
None
|
| Bug bounty |
None
|
None
|
None
|
|
Vulnerability management
|
None
|
None
|
1
|
|
Compliance
|
None
|
None
|
None
|