Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Burp ScannerStackHawk DAST2 of 3 products

Side-by-side comparison of Burp Scanner, StackHawk DAST
Product	Burp Scanner by PortSwigger View product	StackHawk DAST by StackHawk View product
Overview
What it is	Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors.	Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.
Product type	Dynamic Application Security Testing (DAST) Engine	CI/CD Native Dynamic Application Security Testing Platform
Best for	Technology, Financial Services, E-commerce, Healthcare, Retail	DevSecOps, Software Engineering, Financial Services, Technology
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	CloudHybridOn-Premise	SaaSCloud
Deployment details	Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted container	Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI
Data residency	Customer environment / Cloud region dependent	United States; Global Cloud
Key features
What it offers	Automated web vulnerability scanning Embedded Chromium crawler OAST via Burp Collaborator API scanning Authenticated crawling Customized attack insertion points CI/CD integration Remediation advice	Developer-first DAST Automated pull request testing Authenticated session fuzzing Reproducible curl commands CI/CD security quality gates Developer-driven dynamic security testing Pull-request vulnerability triage DevSecOps
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Web applicationsREST APIsSOAP APIsMicroservices	Web ApplicationsMicroservicesCI/CD Runners
Compliance	OWASP Top 10PCI DSSISO 27001SOC 2	SOC 2 Type IIGDPR
Integrations & coverage
Integrations	JenkinsGitLabGitHub ActionsTeamCityAzure DevOpsJiraREST API	GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira
Industries	TechnologyFinancial ServicesE-commerceHealthcareRetail	DevSecOpsSoftware EngineeringFinancial ServicesTechnology
Regions	Global	Global
Vendor
Company	PortSwigger	StackHawk
Headquarters	Knutsford, United Kingdom	Denver, Colorado, USA
Company size	201-500	51-200
Founded	2008	2019

Burp Scanner

by PortSwigger

View product

StackHawk DAST

by StackHawk

View product

Overview

What it is

Burp Scanner

Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors.

StackHawk DAST

Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.

Product type

Burp Scanner

Dynamic Application Security Testing (DAST) Engine

StackHawk DAST

CI/CD Native Dynamic Application Security Testing Platform

Best for

Burp Scanner

Technology, Financial Services, E-commerce, Healthcare, Retail

StackHawk DAST

DevSecOps, Software Engineering, Financial Services, Technology

Pricing

Pricing model

Burp Scanner

Contact Vendor

StackHawk DAST

Contact Vendor

Free trial

Burp Scanner

StackHawk DAST

Deployment

Deployment options

Burp Scanner

CloudHybridOn-Premise

StackHawk DAST

SaaSCloud

Deployment details

Burp Scanner

Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted container

StackHawk DAST

Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI

Data residency

Burp Scanner

Customer environment / Cloud region dependent

StackHawk DAST

United States; Global Cloud

Key features

What it offers

Burp Scanner

Automated web vulnerability scanning
Embedded Chromium crawler
OAST via Burp Collaborator
API scanning
Authenticated crawling
Customized attack insertion points
CI/CD integration
Remediation advice

StackHawk DAST

Developer-first DAST
Automated pull request testing
Authenticated session fuzzing
Reproducible curl commands
CI/CD security quality gates
Developer-driven dynamic security testing
Pull-request vulnerability triage
DevSecOps

Platform & access

API access

Burp Scanner

StackHawk DAST

Single sign-on (SSO)

Burp Scanner

StackHawk DAST

Role-based access (RBAC)

Burp Scanner

StackHawk DAST

Multi-tenant

Burp Scanner

StackHawk DAST

Mobile app

Burp Scanner

StackHawk DAST

Supported platforms

Burp Scanner

Web applicationsREST APIsSOAP APIsMicroservices

StackHawk DAST

Web ApplicationsMicroservicesCI/CD Runners

Compliance

Burp Scanner

OWASP Top 10PCI DSSISO 27001SOC 2

StackHawk DAST

SOC 2 Type IIGDPR

Integrations & coverage

Integrations

Burp Scanner

JenkinsGitLabGitHub ActionsTeamCityAzure DevOpsJiraREST API

StackHawk DAST

GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira

Industries

Burp Scanner

TechnologyFinancial ServicesE-commerceHealthcareRetail

StackHawk DAST

DevSecOpsSoftware EngineeringFinancial ServicesTechnology

Regions

Burp Scanner

Global

StackHawk DAST

Global

Vendor

Company

Burp Scanner

PortSwigger

StackHawk DAST

StackHawk

Headquarters

Burp Scanner

Knutsford, United Kingdom

StackHawk DAST

Denver, Colorado, USA

Company size

Burp Scanner

201-500

StackHawk DAST

51-200

Founded

Burp Scanner

2008

StackHawk DAST

2019