StackHawk HawkScan

Spec sheet

Product

HawkScan is a dynamic application security testing scanner for web applications and APIs.Read 5 Oct 2026 · docs.stackhawk.com

Integrations

The documentation lists CI/CD integrations including GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, and Bitbucket Pipelines, plus workflow integrations such as Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL.Read 5 Oct 2026 · docs.stackhawk.com

Support

The pricing comparison lists Standard support for Wingman and Enterprise support for Scale.Read 5 Oct 2026 · stackhawk.com

Company founding

StackHawk's company profile lists Denver, Colorado as headquarters and 2019 as its founding year.Read 5 Oct 2026 · linkedin.com

Data protection

StackHawk says sensitive customer data is encrypted at rest with AES-256 and data in transit with at least TLS 1.2.Read 5 Oct 2026 · stackhawk.com

Findings and fixes

Wingman tests running apps, helps a coding agent fix findings, and rescans to verify the fix.Read 5 Oct 2026 · stackhawk.com

How it works

HawkScan tests a running application by sending HTTP(S) requests and sends results to the StackHawk Platform for analysis and tracking.Read 5 Oct 2026 · docs.stackhawk.com

Incident notice

StackHawk says it informs customers within 72 hours of discovering a security incident that impacts their data.Read 5 Oct 2026 · stackhawk.com

Install platforms

HawkScan documentation offers installation methods for macOS, Windows, and Linux, and describes running it in Docker, local development, CI/CD pipelines, and production servers.Read 5 Oct 2026 · docs.stackhawk.com

Scan limit

Wingman includes 50 scans per user per month; the pricing page says Scale includes unlimited agentic scans.Read 5 Oct 2026 · stackhawk.com

Scan traffic and code

Wingman says scan traffic stays on the user's machine and that findings and application profiles, rather than source code, go to the StackHawk platform.Read 5 Oct 2026 · stackhawk.com

Security audit

StackHawk says it undergoes an annual ISAE3402 SOC 2 Type II audit and annual penetration tests at a minimum.Read 5 Oct 2026 · stackhawk.com

Supported coding agents

The pricing page lists Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity as supported agents.Read 5 Oct 2026 · stackhawk.com

Vulnerability coverage

Wingman lists examples from more than 150 vulnerability types, including SQL injection, sensitive data exposure, cross-site scripting, and remote code execution.Read 5 Oct 2026 · stackhawk.com

Plans and prices

Every StackHawk HawkScan plan and price →

Where Specifiction places it

• Dynamic Application Security Testing Software#9 of 267.9
• Vulnerability Scanner Software#13 of 297.9
• Application Security Testing#13 of 287.8
• API Security Testing Software#14 of 277.8