StackHawk

StackHawk — Developer & Integration Docs

StackHawk is built to slot into AI agent-driven development pipelines with minimal friction. Here's what developers need to know:

Supported AI Coding Agent Integrations:

• Claude Code
• Cursor
• GitHub Copilot
• Codex
• Antigravity

Scanning approach: StackHawk performs runtime DAST — it scans a live, running instance of your application. This means your app must be running (locally, in a container, or in a CI environment) for a scan to execute. This approach eliminates false positives inherent to SAST/SCA tools by only reporting vulnerabilities that are actually reachable and exploitable at runtime.

Agent loop integration: StackHawk is designed to operate within the AI agent's find → fix → verify loop:

1. Agent triggers a StackHawk scan against the running app.
2. StackHawk returns exploitable vulnerability findings via its API.
3. The agent applies a fix.
4. StackHawk re-scans to verify the fix before the PR is opened.

API: An API is available for programmatic scan management, result ingestion, and pipeline automation.

CI/CD: StackHawk produces a clean signal and per-commit attestation, suitable for use as a security gate in CI pipelines.

Open source: Core components are open source and available on GitHub (16 stars).

Plan limits relevant to developers:

• Wingman: 50 scans/user/month, unlimited apps.
• Scale: Unlimited agentic scans, unlimited apps (custom pricing).