StackHawk HawkScan
6.8#4 in dynamic application security testing softwareFrom $10 a monthWebAPILinuxmacOS
VisitStackHawk HawkScan vs Wapiti
Wapiti
6.6#7 in dynamic application security testing softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitWhat both publish
| Fact | StackHawk HawkScan | Wapiti |
|---|---|---|
| Integrations | The documentation lists CI/CD integrations including GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, and Bitbucket Pipelines, plus workflow integrations such as Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL. | It uses the Wappalyzer database to fingerprint web technologies and report related CVE information, and its SSL/TLS module uses sslscan. |
| Support | The pricing comparison lists Standard support for Wingman and Enterprise support for Scale. | The project directs users to its FAQ, wiki, and GitHub issues for help and bug reports. |
| Vulnerability coverage | Wingman lists examples from more than 150 vulnerability types, including SQL injection, sensitive data exposure, cross-site scripting, and remote code execution. | Its modules cover issues including SQL injection, XSS, file disclosure, command execution, XXE, SSRF, open redirects, and file upload vulnerabilities. |
StackHawk HawkScan plans
- Wingman by StackHawk$10 a month
- StackHawk ScalePriced on request
Wapiti plans
- WapitiFree
Pick StackHawk HawkScan if…
HawkScan suits teams scanning web applications and APIs during development, CI/CD, or production. It also fits users working with supported coding agents and hybrid deployments.
Pick Wapiti if…
Wapiti suits website and web application operators who want to run vulnerability scans in their own environment. It is a command-line tool for users able to install and operate it with a supported Python version.