← Back to Directory
StackHawk
DAST that finds, fixes, and verifies exploitable vulnerabilities inside AI coding agents
StackHawk — frequently asked questions
What is StackHawk?
A dynamic application security testing (DAST) platform that runs inside AI coding agents to find, fix, and verify exploitable vulnerabilities before a PR opens.
Which AI coding agents are supported?
StackHawk agent skills and plugins are available for Claude Code, Cursor, Codex, and Antigravity.
Does StackHawk only find vulnerabilities, or does it also fix them?
It finds, fixes, and verifies. The agent calls HawkScan, applies a source-context fix, and rescans to confirm the issue is resolved.
What kinds of vulnerabilities does it cover?
The site calls out SQL injection, IDOR, and broken authentication, and positions the platform broadly as runtime application security testing.
When in the dev workflow does StackHawk run?
Post-commit and pre-PR, so exploitable issues are remediated before a pull request is opened.