Scan.
Triage.
Fix.
Built to help dev teams ship secure code.
Scan your app.
Find security bugs in your app with a simple docker command.
- Security Bug Scanner
- YAML Config
- Scan History
Triage and fix security bugs.
Fix key bugs, add to a backlog, or mark do-not-fix.
- Bug Triage
- Bug History
- Fix Guides
Triage and fix security bugs.
Fix key bugs, add to a backlog, or mark do-not-fix.
- Bug Triage
- Bug History
- Fix Guides
Automate in the build pipeline.
Don’t let security bugs hit prod. Add HawkScan to your build pipeline.
- Pre-Production Scans
- CI/CD Ready
Security bugs that StackHawk will catch for you
SQL Injection
Arbitrary Code Execution
OS Command Injection
Path Traversal
Cross Site Scripting
Cross Site Request Forgery
Open Redirect
…and More
SQL Injection
Arbitrary Code Execution
OS Command Injection
Path Traversal
Cross Site Scripting
Cross Site Request Forgery
Open Redirect
…and More
The StackHawk Difference
You might be wondering how we differ from Dependabot or Snyk.
These tools are in the category of Dependency Monitoring which means they read your dependency tree and compare things like library versions, etc to a database of known vulnerabilities. They then alert you when you need to update your (code). These are great. Use them! StackHawk is looking at running code that YOU wrote and testing for security bugs like cross-site scripting, SQL Injection and more! So you can find and fix issues before they become vulnerabilities in production.
Scans for bugs
*you've* written.
Don’t just scan your libraries and dependencies. Scan your running code.
Scans for bugs
*you've* written.
Don’t just scan your libraries and dependencies. Scan your running code.
It's a dev tool,
not a security platform.
Existing security tools added “Built for DevOps” to their website. We actually built the product. We can prove it – give us a try.
Makes application
security simple.
The concept is over complicated. You wrote the code, you can know about the security bugs and fix them.
Makes application
security simple.
The concept is over complicated. You wrote the code, you can know about the security bugs and fix them.
It's ready for your
build pipeline!
StackHawk integrates with build systems to scan your code for AppSec bugs on check-in. Check out the documentation for instrumentation into your CI/CD system.
Ready for more?
Read the Docs
$ docker run hawkscan to find your security bugs.