Test driven security for your pipeline!
Features
Security Bug Scanner
Scan your running app for security bugs with a single Docker command.
Bug Triage
Prioritize high risk findings, manage backlog of low risk items, and silence noise of known and accepted risk.
YAML Config
Manage configuration in code, allowing for collaboration, scalability, and version control.
Bug History Coming Soon
See when bugs were introduced across environments, review comments on actions taken, and log resolutions.
Pre-Production Scans
Scan in local dev / test / staging to fix bugs before they become a vulnerability in production.
Scan History
Log of all unique scans and their findings. Audit logs make your CISO happy while you are crushing bugs.
CI/CD Ready
Automate your application security by integrating StackHawk into your CI/CD pipeline.
Fix Guides
Findings include links to fix documentation so you can get back to building features.
Ready for more?
Read the Docs
Get up and running in less than an hour. Build the config file and then
$ docker run hawkscan to find your security bugs.
$ docker run hawkscan to find your security bugs.
Get Started
Find and fix application security bugs before they hit production. Build your config and run your first scan in less than 15 minutes.
StackHawk proudly supports and is free for Open Source projects.
Want to add StackHawk to your open source project? Get in touch.