StackHawk by StackHawk is a dynamic application and API security testing tool designed for modern engineering teams. It focuses on pre-production API and web application security testing, enabling development teams to actively run security tests as part of their traditional software testing workflows. StackHawk integrates security testing into CI/CD workflows, allowing developers to identify and fix security bugs before production. It supports testing for various API types including REST, GraphQL, gRPC, and SOAP, and is built on the trusted open-source ZAP scanner. StackHawk provides detailed request and response data, developer-friendly explanations, and cURL command generation for debugging. It also correlates DAST and SAST results, manages risk levels, and verifies changes with audit logs and comments. The platform is designed to run in any CI/CD environment, supports configuration as code, and offers automated authenticated scanning and findings triage.
