StackHawk
By StackHawk, Inc.. Category: API testing with AI. Homepage
StackHawk's documentation describes StackHawk as a dynamic application security testing tool whose HawkScan scanner tests running web apps and APIs. HawkScan targets a host URL, crawls its routes and can use OpenAPI specifications. Custom security tests can be written in JavaScript or Kotlin. The scanner runs on a laptop, server, Kubernetes or CI, and results go to the StackHawk Platform. CI integration is documented for GitHub Actions, GitLab, CircleCI, Jenkins, Azure Pipelines and others. Agent skills let Claude Code, Cursor, Codex, Antigravity and GitHub Copilot generate scan configuration, run scans, fix vulnerabilities and rescan.
Description written from the vendor's documentation.
Status
Status: Active
Facts
| Fact | Value | Evidence | Source | Verified on |
|---|---|---|---|---|
| Status | Active | Documented | stackhawk.com | |
| AI capabilities | Documented | docs.stackhawk.com | ||
| Test creation | Documented | docs.stackhawk.com | ||
| Test output | Proprietary runner | Documented | docs.stackhawk.com | |
| Surfaces | Documented | docs.stackhawk.com | ||
| Hosting | Documented | docs.stackhawk.com | ||
| Pricing model | Documented | stackhawk.com | ||
| Free tier | No | Documented | stackhawk.com | |
| CI integrations | Documented | docs.stackhawk.com | ||
| Self-healing | None documented | Not documented | None found | |
| Agent integration | StackHawk agent skills (HawkScan, StackHawk API, Data Seed, Optimize) for Claude Code, Cursor, Codex, Antigravity and GitHub Copilot, installed via plugin marketplaces or rule files; docs page is at the MCP Server URL | Documented | docs.stackhawk.com |
Published prices
| Plan | Price | Billing |
|---|---|---|
| Wingman by StackHawk | $10 /user/mo. | Get started - Free 14 day trial; Unlimited apps and 50 scans/user/month |
Vendor-stated, verbatim
What StackHawk, Inc. says about its product, quoted as published and not confirmed in documentation.
“Every other tool finds vulnerabilities. StackHawk fixes them.”
“Zero net new vulnerabilities”
Alternatives
Tools in the same category (API testing with AI), ordered by the number of shared creation and surface values, then by name. Each line lists documented facts that differ from StackHawk.
- KushoAI: documents output Mixed; creation by recording, natural language, prompt to test; hosting hybrid; a free tier
- Qodex: documents output Standard Playwright; creation by natural language, prompt to test; a free tier
- Skyramp: documents output Mixed; creation by recording, natural language
- EvoMaster: documents a free tier
- Karate Labs: documents creation by prompt to test; a free tier
- Keploy: documents creation by recording; a free tier
Questions
Is this page a review of StackHawk?
No. This page is a fact sheet. Each fact shows its evidence level, its source and the date it was checked. We do not rate or rank tools.
Does StackHawk have a free tier?
No. StackHawk has no free tier. This is documented, checked on 2026-09-24.
What test output does StackHawk produce?
Output: Proprietary runner. This is documented, checked on 2026-09-24.
Is StackHawk still available?
Status: Active, checked on 2026-09-24.
Sources
- StackHawk homepage Opened
- StackHawk pricing Opened
- StackHawk docs index (llms.txt) Opened
- StackHawk docs home Opened
- StackHawk docs: Getting Started Opened
- StackHawk docs: HawkScan Opened
- StackHawk docs: CI/CD Integration Opened
- StackHawk docs: Agent Skills (MCP Server page) Opened
Spotted an outdated or wrong fact about StackHawk? Send the source and we apply it at the next monthly update.