Freedom251 › Dynamic Application Security Testing Software
StackHawk HawkScan
What StackHawk HawkScan is
StackHawk HawkScan is a paid dynamic application security testing scanner for running web applications and APIs. It sends HTTP(S) requests to an application, then sends results to the StackHawk Platform for analysis and tracking. Wingman can test running apps, help a coding agent address findings, and rescan to check fixes. Examples cover more than 150 vulnerability types, including SQL injection, cross-site scripting, sensitive data exposure, and remote code execution. Supported agents include Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity. Integrations include GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, Bitbucket Pipelines, Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL. Wingman says scan traffic stays on your machine, while findings and application profiles—not source code—go to the platform. Installation supports macOS, Windows, Linux, Docker, local development, CI/CD, and production servers. Wingman costs $10 per user monthly and includes 50 scans per user each month.
Who it suits
It suits development and security teams scanning live web applications and APIs within local, CI/CD, or production workflows. Its coding-agent integrations support teams using the listed agents.
What it does well
- Tests running web apps and APIs
- Covers more than 150 vulnerability types
- Supports major CI/CD platforms
- Scan traffic stays on the user's machine
- Authenticated scanning and API testing
What to know first
- No free plan
- Wingman limits users to 50 scans monthly
- Scale pricing requires contacting StackHawk
- Paid service with a free trial only
Limits
Wingman includes 50 scans per user per month. Scale includes unlimited agentic scans; its price is available by request.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Wingman by StackHawk | $10/user/mo. · Unlimited apps · 50 scans/user/month · Standard support | $10 a month |
| StackHawk Scale | Talk to us · Unlimited apps · Unlimited agentic scans · Teams, roles, and enterprise support | On request |
As stackhawk.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://www.stackhawk.com/.
- Choose the Wingman plan or contact StackHawk about Scale.
- Use the free trial if you want to try the paid service first.
- Install HawkScan on macOS, Windows, or Linux, or use Docker.
- Run it in local development, a CI/CD pipeline, or a production server.
Verdict
HawkScan combines dynamic scanning, coding-agent assistance, and broad CI/CD integrations for web and API security work. Review scan quotas, deployment needs, and plan pricing before selecting it.
Questions
Is there a free plan?
No. StackHawk lists a free trial and paid plans.
How much does Wingman cost?
Wingman by StackHawk is $10 a month, billed at $10/user/mo.
What does Scale cost?
Scale is listed as “Talk to us”; no price is stated.
Which platforms can run HawkScan?
HawkScan documentation offers installation methods for macOS, Windows, and Linux. The product also lists API, Linux, macOS, self-hosted, web, and Windows platforms.
Which coding agents are supported?
The listed agents are Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity.
What integrations are listed?
CI/CD options include GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, and Bitbucket Pipelines. Workflow options include Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL.
Facts from StackHawk HawkScan's own pages
- Company founding
- StackHawk's company profile lists Denver, Colorado as headquarters and 2019 as its founding year. · linkedin.com, 5 Oct 2026
- Data protection
- StackHawk says sensitive customer data is encrypted at rest with AES-256 and data in transit with at least TLS 1.2. · stackhawk.com, 5 Oct 2026
- Findings and fixes
- Wingman tests running apps, helps a coding agent fix findings, and rescans to verify the fix. · stackhawk.com, 5 Oct 2026
- How it works
- HawkScan tests a running application by sending HTTP(S) requests and sends results to the StackHawk Platform for analysis and tracking. · docs.stackhawk.com, 5 Oct 2026
- Incident notice
- StackHawk says it informs customers within 72 hours of discovering a security incident that impacts their data. · stackhawk.com, 5 Oct 2026
- Install platforms
- HawkScan documentation offers installation methods for macOS, Windows, and Linux, and describes running it in Docker, local development, CI/CD pipelines, and production servers. · docs.stackhawk.com, 5 Oct 2026
- Integrations
- The documentation lists CI/CD integrations including GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, CircleCI, and Bitbucket Pipelines, plus workflow integrations such as Slack, Jira Cloud, Microsoft Teams, and GitHub CodeQL. · docs.stackhawk.com, 5 Oct 2026
- Product
- HawkScan is a dynamic application security testing scanner for web applications and APIs. · docs.stackhawk.com, 5 Oct 2026
- Scan limit
- Wingman includes 50 scans per user per month; the pricing page says Scale includes unlimited agentic scans. · stackhawk.com, 5 Oct 2026
- Scan traffic and code
- Wingman says scan traffic stays on the user's machine and that findings and application profiles, rather than source code, go to the StackHawk platform. · stackhawk.com, 5 Oct 2026
- Security audit
- StackHawk says it undergoes an annual ISAE3402 SOC 2 Type II audit and annual penetration tests at a minimum. · stackhawk.com, 5 Oct 2026
- Support
- The pricing comparison lists Standard support for Wingman and Enterprise support for Scale. · stackhawk.com, 5 Oct 2026
- Supported coding agents
- The pricing page lists Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity as supported agents. · stackhawk.com, 5 Oct 2026
- Vulnerability coverage
- Wingman lists examples from more than 150 vulnerability types, including SQL injection, sensitive data exposure, cross-site scripting, and remote code execution. · stackhawk.com, 5 Oct 2026
Where StackHawk HawkScan stands on Freedom251
- Dynamic Application Security Testing Software#12 of 26
- Application Security Testing#14 of 28
- Vulnerability Scanner Software#15 of 29
- API Security Testing Software#21 of 27