Kiuwan

What the company sells

Kiuwan provides an application security platform centered on static application security testing and software composition analysis, along with code quality and governance add-ons, to help development teams find and remediate vulnerabilities in source code and open-source components. The company was acquired by Idera, Inc. in 2018, joining Idera's Testing Tools Business alongside TestRail and Ranorex Studio.^[1]

Categories

• Static application security testing (primary category)
• Software composition analysis

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Owned by Idera, Inc. since 2018^[2]

CISO on record

Not yet on our record. Send a verified source

Website

kiuwan.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Code Security^[1]

  Static Application Security Testing (SAST) that scans source code for vulnerabilities and compliance with standards such as CWE, OWASP, PCI, CERT and SANS.

• Insights^[1]

  Software Composition Analysis (SCA) that identifies open-source and third-party components, flags known vulnerabilities and checks license compliance.

• Code Quality^[1]

  Provides code analysis metrics for security QA engineers and IT teams in a cloud environment.

• Governance^[1]

  Software governance tooling that manages an application portfolio to gauge risk across the SDLC.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Kiuwan's categories, then alphabetical. A list from the record, never a ranking.

• On static application security testing, Kiuwan competes with Checkmarx, Semgrep, Veracode, AISLE, GitHub Advanced Security, OpenText, Black Duck, Invicti, Phoenix Security, Snyk and 5 more.

• On software composition analysis, Kiuwan competes with Black Duck, Snyk, Sonatype, Checkmarx, Invicti, Phoenix Security, Semgrep, Veracode, Anchore and RapidFort.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]kiuwan.comKiuwan · kiuwan.com · undated page, accessed October 16, 2026 · Tier A: the company, a regulator or a filing
2. [2]Idera acquires kiuwanKiuwan · kiuwan.com · published May 26, 2021 · Tier A: the company, a regulator or a filing

Last verified October 16, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 16, 2026 from the references above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.

Work for Kiuwan? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.