Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 11 Ratings

Total
ease
features
design
support

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

Security Solutions for Your DevOps Process Automate scanning your code to find and fix vulnerabilities. Kiuwan Code Security is compliant with the strictest security standards, such OWASP or CWE. It integrates with top DevOps tools and covers all important languages. Static application security testing and source analysis are both effective, and affordable solutions for all sizes of teams. Kiuwan provides a wide range of essential functionality that can be integrated into your internal development infrastructure. Quick vulnerability detection: Simple and quick setup. You can scan your area and receive results in minutes. DevOps Approach to Code Security: Integrate Kiuwan into your Ci/CD/DevOps Pipeline to automate your security process. Flexible Licensing Options. There are many options. One-time scans and continuous scanning. Kiuwan also offers On-Premise or Saas models.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

GitLab Yes 
OWASP Threat Dragon Yes 
XML Yes 
C No 
C# No 
Checkmarx Yes 
Checkov Yes 
Debricked Yes 
Fortran No 
Google Yes 
HTML No 
IBM Informix No 
IBM Z No 
JFrog Yes 
Jira Work Management No 
MergeBase Yes 
TypeScript No 
Veracode Yes 
Visual Basic No 
WordPress No 

Integrations

GitLab Yes 
OWASP Threat Dragon Yes 
XML Yes 
C Yes 
C# Yes 
Checkmarx No 
Checkov No 
Debricked No 
Fortran Yes 
Google No 
HTML Yes 
IBM Informix Yes 
IBM Z Yes 
JFrog No 
Jira Work Management Yes 
MergeBase No 
TypeScript Yes 
Veracode No 
Visual Basic Yes 
WordPress Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

For both Code Security and Insights pricing is accessible on request, scans and continuous scanning is available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

Kiuwan

Founded

2012

Country

Spain

Website

www.kiuwan.com

Product Features

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning Yes 
Web Threat Management No 
Web Traffic Reporting No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting Yes 
Code Standardization / Validation No 
Multiple Programming Language Support Yes 
Provides Recommendations Yes 
Standard Security/Industry Libraries No 
Vulnerability Management Yes 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis Yes 
Threat Intelligence Yes 
Web Inspection No 

Alternatives

Alternatives

Xygeni Reviews

Xygeni

Xygeni Security
CodeSentry Reviews

CodeSentry

CodeSecure
Revenera SCA Reviews

Revenera SCA

Revenera