StackHawk

StackHawk — Technical Overview

StackHawk is a freemium DAST (Dynamic Application Security Testing) platform built to integrate directly into AI coding agent workflows. Rather than running as a post-merge gate, StackHawk plugs into the agent loop itself — working with Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity — so vulnerabilities are found, fixed, and verified before a pull request is ever opened.

Key architectural characteristics:

• Runtime DAST scanning: StackHawk scans against a running application, meaning it only surfaces genuinely exploitable vulnerabilities — no false positives from static analysis guesswork.
• Agent-driven find → fix → verify loop: The agent discovers a vulnerability, applies a fix, and re-runs the scan to confirm remediation, all within the same coding session.
• CI attestation: Produces a clean signal and attestation per commit, giving security teams verifiable proof that each shipped commit was scanned.
• API available: StackHawk exposes an API, enabling programmatic scan triggering, result retrieval, and integration into custom pipelines.
• Open source: Core components are open source (16 GitHub stars).

Pricing:

• Wingman plan: $10/user/month — 50 scans/user/month, unlimited apps, 14-day free trial, no credit card required.
• Scale plan: Custom/contact-us pricing — unlimited apps and unlimited agentic scans.

Headquartered in Colorado, United States.