Getting Started
Security testing for the way you build
StackHawk is dynamic application security testing (DAST) built for developers. Test your running applications to find real vulnerabilities before they reach production.
Start Scanning
Quick Start
Enter your domain and scan from StackHawk's cloud. No install required.
Install & Run HawkScan
Install the CLI to scan locally or in your CI/CD pipeline.
Authenticated Scanning
Test protected routes behind login screens.
API Discovery
Discover APIs
Find shadow APIs and undocumented routes across your codebase.
OAS Generation
Auto-generate OpenAPI specs from your code repositories.
Sensitive Data
Identify APIs handling PII, PCI, and PHI for prioritized testing.
AI-Powered Security
LLM Security Testing
Test for OWASP LLM Top 10: prompt injection, data disclosure, and more.
MCP Server
Run security tests in Cursor, Claude Code, or Windsurf via natural language.
Advanced Testing
Business Logic Testing
Detect authorization flaws (BOLA/BFLA) with multi-user role testing.
Custom Test Scripts
Write custom security tests in JavaScript or Kotlin.
Integrate & Automate
CI/CD Integration
GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, and more.
Workflow Integrations
Connect to Jira, Slack, Microsoft Teams, and other tools.
Triage Findings
Review and track remediation in the StackHawk Platform.