StackHawk

StackHawk integrates security testing and remediation into AI coding agents to identify and fix exploitable vulnerabilities before code

Paid

Web

Own StackHawk?Claim this listing

#Dynamic Application Security Testing

Overview

StackHawk is an AI coding agent security platform that tests running applications for exploitable vulnerabilities, automatically fixes them in the codebase, and verifies the fixes before code is pushed. It integrates with popular AI coding agents and provides continuous security feedback within the development workflow

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

API Skill Integration

Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

Attack Surface Discovery

Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Who It's For

How to Use

Install StackHawk Agent Skills

Add StackHawk agent skills into your AI coding agent environment or repository to enable security scanning and remediation.

Configure Application Scans

Use the StackHawk API skill to configure security tests for your running application without needing deep security expertise.

Run Security Tests

The HawkScan skill runs dynamic application security tests against your running app post-commit and pre-PR to identify vulnerabilities.

Automatic Vulnerability Fixing

The agent automatically generates and applies fixes directly in the codebase using full source context.

Verify Fixes with Rescanning

The agent rescans the application to confirm that vulnerabilities have been resolved before code is pushed to production.

Pricing

Pricing details are gathered from the official StackHawk website and are provided for reference only. Always confirm the latest information directly with the vendor.

Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Found a change in pricing? We welcome corrections. Reach out so we can keep this listing accurate.

Pros & Cons

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Use Cases

Explore tools grouped by use case so you can keep researching without losing momentum.

Frequently Asked Questions

Alternatives

Compare other vetted products our editors see buyers evaluate alongside StackHawk.

Ratings & reviews

Is StackHawk your tool?

Claim this listing to keep it up to date, respond to reviews, and promote it.

Claim this listing

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

API Skill Integration

Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

Attack Surface Discovery

Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Who It's For

How to Use

Install StackHawk Agent Skills

Add StackHawk agent skills into your AI coding agent environment or repository to enable security scanning and remediation.

Configure Application Scans

Use the StackHawk API skill to configure security tests for your running application without needing deep security expertise.

Run Security Tests

The HawkScan skill runs dynamic application security tests against your running app post-commit and pre-PR to identify vulnerabilities.

Automatic Vulnerability Fixing

The agent automatically generates and applies fixes directly in the codebase using full source context.

Verify Fixes with Rescanning

The agent rescans the application to confirm that vulnerabilities have been resolved before code is pushed to production.

Pricing

Pricing details are gathered from the official StackHawk website and are provided for reference only. Always confirm the latest information directly with the vendor.

Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Found a change in pricing? We welcome corrections. Reach out so we can keep this listing accurate.

Pros & Cons

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Use Cases

Explore tools grouped by use case so you can keep researching without losing momentum.

Frequently Asked Questions

Alternatives

Compare other vetted products our editors see buyers evaluate alongside StackHawk.

StackHawk

Overview

Featured Video

Key Features

HawkScan Skill

API Skill Integration

Automatic Vulnerability Fixes

Rescanning Verification

Attack Surface Discovery

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Who It's For

How to Use

Install StackHawk Agent Skills

Configure Application Scans

Run Security Tests

Automatic Vulnerability Fixing

Verify Fixes with Rescanning

Pricing

Pros & Cons

Pros

Cons

Use Cases

Frequently Asked Questions

Alternatives

Ratings & reviews

Featured Video

Key Features

HawkScan Skill

API Skill Integration

Automatic Vulnerability Fixes

Rescanning Verification

Attack Surface Discovery

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Who It's For

How to Use

Install StackHawk Agent Skills

Configure Application Scans

Run Security Tests

Automatic Vulnerability Fixing

Verify Fixes with Rescanning

Pricing

Pros & Cons

Pros

Cons

Use Cases

Frequently Asked Questions

Alternatives

Ratings & reviews