The latest Kiuwan release includes a new CQM model and two new checkpoints to allow using the Life Cycle module together with Insights. Keeping up with the times Go The new CQM model 2.5.0 includes 56 new rules supporting the popular programming la...
Kiuwan provides SAST and SCA solutions that use an on-premise standalone Java application for the scanning of source code, then sends the results file to the Kiuwan cloud for augmentation and additional analysis. This Java scanner is calle...
On February 13 we released support for a new programming language: Go (aka Golang). We have added 56 new security rules for Go in our default analysis model (CQM). Visit our Change Log for an explanation on how to view these rul...
Application security testing (AST) requires a comprehensive approach that can catch modern, sophisticated threats from multiple angles and covers all attack surfaces. Unfortunately, you can’t mount such a multi-tiered defense with only one tool. You’ll need d...
Food for Thought: On-premises Goes Hybrid Using application security testing (AST) tools has many benefits; for example increasing the speed, efficiency and coverage paths for testing applications. However, there are many reasons why individuals may feel inse...
Announcement: End of Support for TLS 1.0 and 1.1. On March 1st Kiuwan will disable support for TLS 1.0 and 1.1. Why? Only 3% of our systems traffic uses TLS 1.0., so we have decided to disable support for it from March 2020 onwards. What is TLS?&nbs...
Source code vulnerabilities are one of the central openings that allow threat actors to carry out their cyberattacks. From code injection to denial of service (DOS) attacks, hackers can exploit these vulnerabilities to access users’ information. They ma...
SAST (also called “white box testing) is the basic form of security testing for application development. It involved the hard work of examining the actual un-compiled application source code to see if and where security vulnerabilities exist. This form of sec...
On January 23, 2019, Idera, Inc., parent company of global B2B software productivity brands, announced the acquisition of Travis CI, a market leader in continuous integration. Travis CI joins Kiuwan in Idera, Inc.’s Testing Tools division, which als...
Idera, Inc. Acquires Kiuwan and Bolsters Testing Tools Business with Application Security and Code Testing Capabilities Adding security to DevOps processes will empower developers with state-of-the-art insights and analysis HOUSTON – Oct. 5, 2018&nb...
Kiuwan’s latest release now includes coverage for Python. Python was conceived in the late 1980s, and its implementation began in December 1989 by Guido van Rossum. Van Rossum is Python’s principal author, and his continuing central role in deciding the direc...
Learn how to make your own OWASP Benchmark test with Kiuwan on our DIY Blog post. What is the OWASP Benchmark? I’m sure that most of you are familiar with OWASP (Open Web Application Security Project), or at least you have heard about their fam...
App and software breaches can have lasting consequences. They also aren’t going anywhere. Finding vulnerabilities in your app and code early is critical. Maintaining strong security practices during and after development is essential to protecting your business.