Application security testing today largely does not serve today’s engineering teams. Scanners test production applications and assume that a security team is leading the scans. We’ve seen automation in CI/CD advance so many other parts of software engineering, but application security has lagged. StackHawk is a developer tool and puts AppSec into the hands of engineering teams.
Here are a few key highlights: + Best-in-Class Scanner. We’re built on the open source ZAP project (https://zaproxy.org), the most frequently used application security scanner out there. + Supports Modern Tech. GraphQL, single page apps, REST APIs. You name it, we scan it. And we make pipeline automation easy. + Built for Engineering Teams. Yaml config, Docker based scanner, command line focus, engineering tooling integrations. We build this for you.
Take a look at https://stackhawk.com or shoot us a note at hello@stackhawk.com!