StackHawk

StackHawk integrates security testing and remediation into AI coding agents to identify and fix exploitable vulnerabilities before code

Visit website

Own StackHawk?Claim this listing

#Dynamic Application Security Testing

StackHawk

Visit

Overview

StackHawk is an AI coding agent security platform that tests running applications for exploitable vulnerabilities, automatically fixes them in the codebase, and verifies the fixes before code is pushed.

Last updated: 2026-06-29

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

API Skill Integration

Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

Attack Surface Discovery

Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Pricing

Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Pricing is collected from the official StackHawk website and may change. Always confirm with the vendor.

Frequently Asked Questions

Ratings & reviews

No reviews yet. Be the first to share your experience.

Share your experience

Help others decide, your insights matter

Community reviews (0)

Most recent

No reviews yet. Be the first to share your experience.

Ratings & reviews

No reviews yet. Be the first to share your experience.

Share your experience

Help others decide, your insights matter

Community reviews (0)

Most recent

No reviews yet. Be the first to share your experience.

Key Features

HawkScan Skill

Runs security tests against running applications post-commit and pre-PR to identify, remediate, and verify exploitable vulnerabilities.

API Skill Integration

Communicates with the StackHawk platform to configure security tooling, optimize testing, and triage findings without requiring security expertise.

Automatic Vulnerability Fixes

The agent remediates vulnerabilities directly in the codebase using full source context to generate accurate fixes.

Rescanning Verification

After fixes are applied, the agent rescans the application to confirm vulnerabilities are resolved before code is pushed.

Attack Surface Discovery

Automatically discovers APIs, microservices, serverless functions, and endpoints from source code repositories to maintain up-to-date attack surface visibility.

OpenAPI Spec Generation

Uses AI to auto-generate and continuously update OpenAPI specifications from source code, eliminating manual spec writing and maintenance.

Sensitive Data Detection

Identifies where sensitive data such as PII, PCI, and HIPAA information resides within applications to prioritize security efforts.

Multi-Agent Support

Integrates with multiple AI coding agents including Claude Code, Cursor, Codex, Antigravity, and GitHub Copilot to provide consistent security workflows.

Pros

Integrates security testing and fixes directly into AI coding agent workflows, reducing context switching.
Automatically discovers and maps application attack surfaces from source code for comprehensive coverage.
Provides automatic vulnerability remediation with verification before code commits to prevent exploitable code shipping.
Supports multiple popular AI coding agents, enabling team-wide consistent security processes.
Includes sensitive data detection and risk insights to prioritize security efforts effectively.

Cons

Pricing is based on per-user subscription which may be costly for large teams.
Limited to integration with specific AI coding agents; may not support all development environments.
Advanced features like attack surface discovery and reporting require the higher-tier Scale plan.
No explicit mention of support for legacy or non-AI coding workflows.
Free trial limited to 14 days, which may be short for some evaluation needs.

Pricing

Plan	Price	Highlights
Wingman by StackHawk	$10	Works inside Claude Code, Cursor, and GitHub Copilot with no context switch Auto-configures and boots your app for testing Finds and fixes vulnerabilities in the same session 50 scans per user per month Unlimited apps CI clean signal and attestation
StackHawk Scale	Contact Sales	Includes everything in Wingman Unlimited apps and unlimited agentic scans Attack surface discovery Sensitive data detection Program reporting and team management Enterprise support and SSO

Pricing is collected from the official StackHawk website and may change. Always confirm with the vendor.

StackHawk

Overview

Key Features

HawkScan Skill

API Skill Integration

Automatic Vulnerability Fixes

Rescanning Verification

Attack Surface Discovery

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Pros

Cons

Pricing

Featured Video

Frequently Asked Questions

Ratings & reviews

Ratings & reviews

Community reviews (0)

Ratings & reviews

Community reviews (0)

Key Features

HawkScan Skill

API Skill Integration

Automatic Vulnerability Fixes

Rescanning Verification

Attack Surface Discovery

OpenAPI Spec Generation

Sensitive Data Detection

Multi-Agent Support

Pros

Cons

Pricing

Featured Video

Frequently Asked Questions

More in Software Development

Lovable

Cursor

Claude Code

OpenAI Codex

Postman

Pythagora

Ratings & reviews

Community reviews (0)

More in Software Development

Lovable

Cursor

Claude Code

OpenAI Codex

Postman

Pythagora