Read the Docs
Get up and running in less than an hour. Build the config file and then $ docker run hawkscan to find your security bugs.
Faster Scan Times. Deeper API Scanning. Try StackHawk.
StackHawk was built to streamline application and API security testing within your current workflows, giving teams the ability to find and fix within their CI/CD workflows prior to pushing any code to production.
Trusted by
Comparison Guide
StackHawk vs. Veracode
Of course, there are feature differences between Veracode and StackHawk. You can dive into the full feature comparison table to see exactly how the two tools stack up.
See the guide| Feature |  |  |
|---|---|---|
| DAST SCANNER | ||
| Automated Authenticated Scanning |  | |
| Server-side HTML Application Testing | | |
| Single Page Application Testing | | |
| SOAP API Testing | | |
| REST API Testing | | |
| GraphQL Testing | | |
| Technology Specific API Scan Configs | | |
| Optimized for Fast Scanning in CI/CD | | |
| No Infrastructure Configuration Required | | |
| CI/CD AUTOMATION | ||
| Findings Triage and State Management | | |
| Finding History and Documentation | | |
| Docker-Based Scanner to Scan Anywhere | | |
| Integrations with All Major CI/CD Tools | | |
| TESTING EXPERIENCE | ||
| User-First Web Application | | |
| Simplified YAML Configuration | | |
| Simplified Fixes with Docs and cURL Command Generation | | |
| Slack Integration | | |
| MS Teams Integration | | |
| Jira Integration | | |
| Datadog Integration | | |
| OpenAPI Spec Integration for API Testing | |
What Makes StackHawk Different?
Modern DAST & API Security Scanner
StackHawk runs lightning fast dynamic security tests against applications and APIs. With testing for today's application architecture, your team will have more accurate vulnerability detection and faster fixes.
Built for Automation in CI/CD
Shift application security testing left, running StackHawk tests alongside unit and integration tests. StackHawk is optimized for performance in the build pipeline, ensuring that newly introduced vulnerabilities are identified quickly.
Unmatched Developer Experience
Find and fix application security issues faster with StackHawk. Developers are notified of newly introduced vulnerabilities with GitHub pull request commenting, and are equipped to fix issues quickly within StackHawk.
What StackHawk Tests
As a dynamic testing tool, StackHawk is language agnostic.
Fixing Vulnerabilities
Fix Documentation
Push an updated PR quickly with provided links to fix documentation.
cURL Command Recreation
Step through code with the same request and find the bug faster.
Smaller Test Units
Scan every microservice on each PR and spend less time hunting when a finding is surfaced.
Integrations
Your application security tooling is just another part of your engineering stack. With StackHawk, integrating AppSec into your existing workflows is easy.
...and more
StackHawk vs. Veracode
Comparison Guide
See exactly how StackHawk and Veracode stack up.
Security is shifting left with engineers being notified of new vulnerabilities before they hit production, and equipped for self-service triage and fix. StackHawk is the only dynamic application security testing tool built for developers.
Try StackHawkRequest a Demo| Feature | | |
|---|---|---|
| DAST SCANNER | ||
| Automated Authenticated Scanning | | |
| Server-side HTML Application Testing | | |
| Single Page Application Testing | | |
| SOAP API Testing | | |
| REST API Testing | | |
| GraphQL Testing | | |
| Technology Specific API Scan Configs | | |
| Optimized for Fast Scanning in CI/CD | | |
| No Infrastructure Configuration Required | | |
| CI/CD AUTOMATION | ||
| Findings Triage and State Management | | |
| Finding History and Documentation | | |
| Docker-Based Scanner to Scan Anywhere | | |
| Integrations with All Major CI/CD Tools | | |
| TESTING EXPERIENCE | ||
| User-First Web Application | | |
| Simplified YAML Configuration | | |
| Simplified Fixes with Docs and cURL Command Generation | | |
| Slack Integration | | |
| MS Teams Integration | | |
| Jira Integration | | |
| Datadog Integration | | |
| OpenAPI Spec Integration for API Testing | |
Ready For More?
Read the Docs
Get Started
Find and fix application security bugs before they hit production. Build your config and run your first scan in less than 15 minutes.
Request a Live Demo
If you are interested in seeing more of the StackHawk platform, schedule time with our experts for a live custom demo.