

StackHawk Platform
Your complete runtime application and API security testing platform.

API Attack Surface Discovery
Automatically map your complete API attack surface

Runtime Application Security Testing Seamlessly find and fix app vulnerabilities in runtime

Application Security Oversight
Continuously monitor your application security risk

Integrations

Modern DAST
Runtime, pre-production testing for apps & APIs

Shift-Left API Security Testing
Ship secure APIs with automated testing in CI/CD

Code-Based Sensitive Data Detection
Identify and test APIs handling PII, PCI, and PHI data

LLM Application Security Testing
Surface critical LLM risks as part of existing runtime testing

gRPC Security Testing
Keep your gRPC services secure with automated testing

GraphQL Security Testing
Check for GraphQL vulnerabilities on every pull request

Business Logic Testing
Detect complex authorization flaws automatically

Developers

Docs
Learn how StackHawk works and integrates in your stack

Technical Blogs
Dive into common vulnerabilities and how to fix them

Getting Started
Start scanning your application or API with our tutorials

StackHawk API
Explore the StackHawk API and start integrating today

Security

Watch a Demo
See the StackHawk platform and scanner in flight

Blog
Read product updates, guides, tutorials, and more

AI Era AppSec Survival Guide
Download our 2026 survey and state of AppSec report

All Resources
Dive into our webinars, news, reports, and more

About Us

KaaKaww!! Meet our hawksome team and discover what makes our nest so special.

Customers
Read about how innovators use StackHawk to ship securely

Partners
Learn about our technology and channel partners

Contact
Give us a squawk

Careers
See our open positions to join our nest

News
Hot off the perch: see what we’ve been up to

Sign In

API Security for the AI Era

by Kaitlyn Marler | Dec 22, 2025

AI is transforming how applications are built, what they are made of, and the risks that are causing real breaches. Developers are shipping APIs faster than teams can track, with the help of AI coding assistants and embedding LLM capabilities that create entirely new attack surfaces..

Is your API security program prepared for this new reality?

Watch how we cover where API security has been, where it’s headed, and how to lead—not follow.

This webinar hosted by Chris Ray, Field CTO at GigaOm and Scott Gerlach, CSO & Co-Founder at StackHawk breaks down:

How to finally get an accurate API inventory that captures AI/LLM components alongside traditional endpoints
The LLM-specific threats emerging now, and what your application security testing should cover
A practical framework for building an API security program prepared for the AI era

Speakers

Scott Gerlach

CSO & Co-founder, StackHawk

Chris Ray

Field CTO, GigaOm