StackHawk Platform
Your complete runtime application and API security testing platform.
API Attack Surface Discovery
Automatically map your complete API attack surface
Application Security Oversight
Continuously monitor your application security risk
Integrations
Modern DAST
Runtime, pre-production testing for apps & APIs
Shift-Left API Security Testing
Ship secure APIs with automated testing in CI/CD
Code-Based Sensitive Data Detection
Identify and test APIs handling PII, PCI, and PHI data
LLM Application Security Testing
Surface critical LLM risks as part of existing runtime testing
gRPC Security Testing
Keep your gRPC services secure with automated testing
GraphQL Security Testing
Check for GraphQL vulnerabilities on every pull request
Business Logic Testing
Detect complex authorization flaws automatically
Developers
Docs
Learn how StackHawk works and integrates in your stack
Technical Blogs
Dive into common vulnerabilities and how to fix them
Getting Started
Start scanning your application or API with our tutorials
StackHawk API
Explore the StackHawk API and start integrating today
Security
Watch a Demo
See the StackHawk platform and scanner in flight
Blog
Read product updates, guides, tutorials, and more
AI Era AppSec Survival Guide
Download our 2026 survey and state of AppSec report
All Resources
Dive into our webinars, news, reports, and more
About Us
KaaKaww!! Meet our hawksome team and discover what makes our nest so special.
Customers
Read about how innovators use StackHawk to ship securely
Partners
Learn about our technology and channel partners
Contact
Give us a squawk
Careers
See our open positions to join our nest
News
Hot off the perch: see what we’ve been up to
StackHawk Platform
Your complete runtime application and API security testing platform
API Attack Surface Discovery
Automatically map your complete API attack surface
Runtime Application Security Testing
Seamlessly find and fix app vulnerabilities in runtime
Application Security Oversight
Continuously monitor your application security risk
Modern DAST
Runtime, pre-production testing for apps & APIs
Shift-Left API Security Testing
Ship secure APIs with automated testing in CI/CD
Code-Based Sensitive Data Detection
Identify and test APIs handling PII, PCI, and PHI data
LLM Application Security Testing
Surface critical LLM risks as part of existing runtime testing
gRPC Security Testing
Keep your gRPC services secure with automated testing
GraphQL Security Testing
Check for GraphQL vulnerabilities on every pull request
Business Logic Testing
Detect complex authorization flaws automatically
Docs
Learn how StackHawk works and integrates in your stack
Technical Blogs
Dive into common vulnerabilities and how to fix them
Getting Started
Start scanning your application or API with our tutorials
StackHawk API
Explore the StackHawk API and start integrating today
Watch a Demo
See the StackHawk platform and scanner in flight
Blog
Read product updates, guides, tutorials, and more
AI Era AppSec Survival Guide
Download our 2026 survey and state of AppSec report
All Resources
Dive into our webinars, news, reports, and more
✔️ Custom Scan Discovery: Using Cypress Test Suites to discover your application’s paths.
✔️ Custom Test Data for REST APIs: Injecting custom variables into REST API parameters to exercise more of your application’s business logic.
✔️ Custom Test Scripts: Migrating test scripts from ZAP and registering custom scripts to StackHawk.
Semgrep
GitHub
Snyk
Endor Labs
AWS
