EVERYTHING XIAOMI
Get listed

StackHawk HawkScan

StackHawk HawkScan is a dynamic application security testing scanner for web applications and APIs.

Place
#4 of 26
Score
6.8
StackHawk HawkScan's website

What StackHawk HawkScan is

StackHawk HawkScan is a dynamic application security testing scanner for web applications and APIs. It examines a running application by sending HTTP(S) requests, then sends results to the StackHawk Platform for analysis and tracking. HawkScan supports authenticated scanning, API testing, and a hybrid deployment model. Installation options cover macOS, Windows, and Linux, with use in Docker, local development, CI/CD pipelines, and production servers. Wingman can test running applications, assist a supported coding agent with findings, and rescan to check a fix. Its examples span more than 150 vulnerability types, including SQL injection, sensitive data exposure, cross-site scripting, and remote code execution. Supported agents include Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity. Integrations include major CI/CD and workflow services. Wingman says scan traffic remains on the user’s machine, while findings and application profiles, rather than source code, are sent to the platform. The service is paid from 5 /mo, with a free trial and no free plan.

Good

  • Tests running web applications and APIs
  • Supports authenticated scanning
  • Covers more than 150 vulnerability types
  • Integrates with CI/CD workflows
  • Offers a free trial

Watch out

  • No free plan
  • Wingman limits users to 50 scans monthly
  • Scale pricing requires contacting StackHawk
  • Paid service

Who it suits

HawkScan suits teams scanning web applications and APIs during development, CI/CD, or production. It also fits users working with supported coding agents and hybrid deployments.

Verdict

HawkScan combines dynamic testing with coding-agent assistance and rescanning. Its scan limit and paid model matter when planning regular use.

Plans and prices

From StackHawk HawkScan's own pricing page, checked 5 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Wingman by StackHawk$10 a monthUnlimited apps · 50 scans/user/month · Standard support · $10/user/mo.
StackHawk ScalePriced on requestUnlimited apps · Unlimited agentic scans · Teams, roles, and enterprise support · Talk to us

The facts

Each one read from StackHawk HawkScan's own pages, with the date it was checked.

The company

Company founding
StackHawk's company profile lists Denver, Colorado as headquarters and 2019 as its founding year.checked 5 Oct 2026

What it does

Data protection
StackHawk says sensitive customer data is encrypted at rest with AES-256 and data in transit with at least TLS 1.2.checked 5 Oct 2026
Findings and fixes
Wingman tests running apps, helps a coding agent fix findings, and rescans to verify the fix.checked 5 Oct 2026
How it works
HawkScan tests a running application by sending HTTP(S) requests and sends results to the StackHawk Platform for analysis and tracking.checked 5 Oct 2026
Incident notice
StackHawk says it informs customers within 72 hours of discovering a security incident that impacts their data.checked 5 Oct 2026
Integrations
The documentation lists CI/CD integrations including GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, and Bitbucket Pipelines, plus workflow integrations such as Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL.checked 5 Oct 2026
Product
HawkScan is a dynamic application security testing scanner for web applications and APIs.checked 5 Oct 2026
Scan limit
Wingman includes 50 scans per user per month; the pricing page says Scale includes unlimited agentic scans.checked 5 Oct 2026
Scan traffic and code
Wingman says scan traffic stays on the user's machine and that findings and application profiles, rather than source code, go to the StackHawk platform.checked 5 Oct 2026
Security audit
StackHawk says it undergoes an annual ISAE3402 SOC 2 Type II audit and annual penetration tests at a minimum.checked 5 Oct 2026
Support
The pricing comparison lists Standard support for Wingman and Enterprise support for Scale.checked 5 Oct 2026
Supported coding agents
The pricing page lists Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity as supported agents.checked 5 Oct 2026
Vulnerability coverage
Wingman lists examples from more than 150 vulnerability types, including SQL injection, sensitive data exposure, cross-site scripting, and remote code execution.checked 5 Oct 2026

Where it runs

Install platforms
HawkScan documentation offers installation methods for macOS, Windows, and Linux, and describes running it in Docker, local development, CI/CD pipelines, and production servers.checked 5 Oct 2026

Alternatives to StackHawk HawkScan

All alternatives
  1. 1

    OWASP ZAP

    Free planOpen sourceAPIExtensionLinuxmacOS
    7.6Free plan
    Visit
  2. 2DASTA-AI logo

    DASTA-AI

    Free planWebAPI
    7.3From $100 a month
    Visit
  3. 3Beagle Security logo

    Beagle Security

    Free planWebAPI
    6.9From $99 a month
    Visit
  4. 4

    w3af

    Free planWebAPILinuxmacOS
    6.8Free plan
    Visit
  5. 5Indusface WAS logo

    Indusface WAS

    Web
    6.6From $599 a year
    Visit
  6. 6

    Wapiti

    Free planLinuxmacOSSelf-hostedWindows
    6.6Free plan
    Visit