What is StackHawk?

StackHawk is a developer-first API and application security testing platform built around dynamic application security testing. It scans REST, GraphQL, gRPC, and SOAP APIs for vulnerabilities such as SQL injection and XSS, and uses Smart Crawl to read OpenAPI specs and simulate real user flows with minimal manual setup.

Its Business Logic Testing catches BOLA, BFLA, and privilege escalation issues from the OWASP API Top 10, while source-code based discovery maps shadow APIs via GitHub and GitLab. StackHawk integrates directly with AI coding agents like Claude Code, Cursor, and GitHub Copilot, and tests LLM-powered features for prompt injection and data leakage. Pricing starts at $10 per user per month for the Wingman plan, with a custom Scale plan for larger teams.

Key Features of StackHawk

Here are the powerful features that make StackHawk stand out from the competition. Packed with innovative tools and advanced functionalities, this software offers a range of benefits.

  • Automated DAST for REST, GraphQL, gRPC, and SOAP APIs
  • Business Logic Testing for BOLA, BFLA, and privilege escalation
  • Smart Crawl using OpenAPI specs for deterministic test flows
  • Source-code based shadow API discovery via GitHub and GitLab
  • CI/CD integration with pull-request level alerts
  • Direct integration with Claude Code, Cursor, and GitHub Copilot
  • LLM-powered application testing for prompt injection and data leakage
  • Program-level reporting on coverage and fix rates

StackHawk Pricing

Here are the pricing plans for StackHawk. Choose the plan that best fits your requirements and budget.

Wingman

$10/month per user

50 scans per user per month, unlimited apps

Integrates with Claude Code, Cursor, and GitHub Copilot; auto-configures and tests applications; 14-day free trial

Scale

Custom

Unlimited apps and unlimited agentic scans

All Wingman features plus attack surface discovery, sensitive data detection, program reporting, SSO, and enterprise support

StackHawk Specifications

Get a closer look at the technical specifications and system requirements for StackHawk. Find out if it's compatible with your operating system and other software.

Software Tagline :
Developer-first DAST for AI coding agents and API security testing
Deployment :
  • cloud based
Subscription Plan :
monthly
Desktop Platforms :
  • web app
Mobile Platforms :
Language Support :
english
Target Audience :
  • freelancers
  • startups
  • smes
  • enterprises
Available Support :
  • email
  • live support
  • tickets
Integrations :
Claude Code, Cursor, GitHub Copilot, GitHub, GitLab, CI/CD pipelines
API Available :
Yes
Free Trial Available :
Yes
Run On Mobile Browser :
Yes
Free Plan Available :
No
Customization Available :
Yes

StackHawk Videos

StackHawk Screenshots

Overall StackHawk Reviews

Here's our unbiased review of StackHawk. Discover how our team of experts rates its features, ease of use, customer support, and other aspects that contribute to its overall appeal.

0/5

Based on 0 Reviews

0

Feature

Out of 5

0

Ease of use

Out of 5

0

Value for money

Out of 5

0

Customer support

Out of 5

0

Overall Rating

Out of 5

StackHawk Pros and Cons

StackHawk FAQs

The Wingman plan costs $10 per user per month with 50 scans per user per month and unlimited apps; the Scale plan is custom-priced for larger teams.

Yes, StackHawk offers a 14-day free trial with no credit card required.

It tests REST, GraphQL, gRPC, and SOAP APIs.

Yes, it integrates with Claude Code, Cursor, and GitHub Copilot to auto-test code as it is written.

Yes, its Business Logic Testing uses configurable user profiles to catch BOLA, BFLA, and privilege escalation flaws.