StackHawk

StackHawk integrates security testing and remediation into AI coding agents to identify and fix exploitable vulnerabilities before code

Visit website

Own StackHawk?Claim this listing

Rating

No ratings yet

Be the first to rate StackHawkTap a star. No account needed.

StackHawk

Visit

Overview

StackHawk is an AI coding agent security platform that tests running applications for exploitable vulnerabilities, automatically fixes them in the codebase, and verifies the fixes before code is pushed.

Updated Jun 29, 2026.

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Pricing

StackHawk pricing plans
Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Pricing is collected from the official StackHawk website and may change. Always confirm with the vendor.

Developer features

API Skill Integration
Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.
Attack Surface Discovery
Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

Frequently Asked Questions

Ratings & reviews

No reviews yet. Be the first to share your experience.

Share your experience

Help others decide, your insights matter

Community reviews (0)

Most recent

No reviews yet. Be the first to share your experience.

Ratings & reviews

No reviews yet. Be the first to share your experience.

Share your experience

Help others decide, your insights matter

Community reviews (0)

Most recent

No reviews yet. Be the first to share your experience.

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Pricing

StackHawk pricing plans
Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Pricing is collected from the official StackHawk website and may change. Always confirm with the vendor.

Developer features

API Skill Integration
Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.
Attack Surface Discovery
Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

StackHawk

Overview

Key Features

HawkScan Skill

Automatic Vulnerability Fixes

Rescanning Verification

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Pros

Cons

Pricing

Developer features

API Skill Integration

Attack Surface Discovery

Featured Video

Frequently Asked Questions

Ratings & reviews

Ratings & reviews

Community reviews (0)

Ratings & reviews

Community reviews (0)

Key Features

HawkScan Skill

Automatic Vulnerability Fixes

Rescanning Verification

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Pros

Cons

Pricing

Developer features

API Skill Integration

Attack Surface Discovery

Featured Video

Frequently Asked Questions

More in Software Development

Ratings & reviews

Community reviews (0)

More in Software Development