Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Burp Scanner by PortSwigger View product | StackHawk HawkScan by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors. | StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives. |
| Product type | Dynamic Application Security Testing (DAST) Engine | Containerized Dynamic Security Scanning Engine |
| Best for | Technology, Financial Services, E-commerce, Healthcare, Retail | Software Developers, DevOps Teams, Technology Startups |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudHybridOn-Premise | Cloud |
| Deployment details | Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted container | Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary |
| Data residency | Customer environment / Cloud region dependent | Local Workstation / Pipeline Host |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Web applicationsREST APIsSOAP APIsMicroservices | Containerized CI PipelinesDeveloper Workstations |
| Compliance | OWASP Top 10PCI DSSISO 27001SOC 2 | SOC 2 Type II |
| Integrations & coverage | ||
| Integrations | JenkinsGitLabGitHub ActionsTeamCityAzure DevOpsJiraREST API | DockerKubernetesGitGitHubGitLabBitbucket |
| Industries | TechnologyFinancial ServicesE-commerceHealthcareRetail | Software DevelopersDevOps TeamsTechnology Startups |
| Regions | Global | Global |
| Vendor | ||
| Company | PortSwigger | StackHawk |
| Headquarters | Knutsford, United Kingdom | Denver, Colorado, USA |
| Company size | 201-500 | 51-200 |
| Founded | 2008 | 2019 |
Overview
What it is
Burp Scanner
Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors.StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.Product type
Burp Scanner
Dynamic Application Security Testing (DAST) EngineStackHawk HawkScan
Containerized Dynamic Security Scanning EngineBest for
Burp Scanner
Technology, Financial Services, E-commerce, Healthcare, RetailStackHawk HawkScan
Software Developers, DevOps Teams, Technology StartupsPricing
Pricing model
Burp Scanner
Contact VendorStackHawk HawkScan
Contact VendorFree trial
Burp Scanner
Free trial: yesStackHawk HawkScan
Free trial: yesDeployment
Deployment options
Burp Scanner
StackHawk HawkScan
Deployment details
Burp Scanner
Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted containerStackHawk HawkScan
Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI BinaryData residency
Burp Scanner
Customer environment / Cloud region dependentStackHawk HawkScan
Local Workstation / Pipeline HostKey features
What it offers
Burp Scanner
- Automated web vulnerability scanning
- Embedded Chromium crawler
- OAST via Burp Collaborator
- API scanning
- Authenticated crawling
- Customized attack insertion points
- CI/CD integration
- Remediation advice
StackHawk HawkScan
- Containerized DAST engine
- Hawkscan.yml configuration as code
- OpenAPI parsing
- Custom script injection
- Local terminal output
- Containerized DAST execution
- Configuration-as-code vulnerability scanning
- Local debugging
Platform & access
API access
Burp Scanner
API access: yesStackHawk HawkScan
API access: yesSingle sign-on (SSO)
Burp Scanner
SSO: yesStackHawk HawkScan
SSO: yesRole-based access (RBAC)
Burp Scanner
RBAC: yesStackHawk HawkScan
RBAC: yesMulti-tenant
Burp Scanner
Multi-tenant: yesStackHawk HawkScan
Multi-tenant: yesMobile app
Burp Scanner
Mobile app: noStackHawk HawkScan
Mobile app: noSupported platforms
Burp Scanner
StackHawk HawkScan
Compliance
Burp Scanner
StackHawk HawkScan
Integrations & coverage
Integrations
Burp Scanner
StackHawk HawkScan
Industries
Burp Scanner
StackHawk HawkScan
Regions
Burp Scanner
StackHawk HawkScan
Vendor
Company
Burp Scanner
PortSwiggerStackHawk HawkScan
StackHawkHeadquarters
Burp Scanner
Knutsford, United KingdomStackHawk HawkScan
Denver, Colorado, USACompany size
Burp Scanner
201-500StackHawk HawkScan
51-200Founded
Burp Scanner
2008StackHawk HawkScan
2019