CheckOps home

Tools directory

S

CheckOps

StackHawk

StackHawk is a developer-focused application security testing platform, now positioned as an AI coding agent security platform that finds, fixes and verifies exploitable vulnerabilities; plans from $10 per user per month.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

StackHawk began as a developer-first DAST built on OWASP ZAP for testing running applications and APIs in CI. Its site now positions it as an AI coding agent security platform: it lets coding agents find, fix and verify exploitable vulnerabilities in AI-generated code before it ships.

Features

  1. Runtime testing: Tests running apps and APIs for exploitable issues.
  2. API focus: REST, GraphQL, gRPC and SOAP testing; see docs.
  3. CI/CD integration: Run scans in pipelines.
  4. Agent workflows: Integration with AI coding agents, per the vendor.
  5. Fix guidance: Remediation details for developers.

Pros

Cons

  1. Repositioning: Product focus has shifted toward AI coding agents.
  2. Commercial: No free self-serve tier beyond the trial.

Install the HawkScan CLI or use the GitHub Action, add a stackhawk.yml with your app host, then run hawk scan against a running test environment.

Resources:

Pricing

From StackHawk’s pricing page: Wingman at $10 per user per month with a 14-day trial; Scale is contact sales.

  1. Developer teams wanting DAST in CI.
  2. Teams using AI coding agents who want security verification.
  3. Not a fit if you only want a free scanner; use ZAP.

Conclusion

StackHawk brings runtime security testing into developer and AI-agent workflows.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with StackHawk side by side.