Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

GitLab API SecurityStackHawk DAST2 of 3 products

Side-by-side comparison of GitLab API Security, StackHawk DAST
Product	GitLab API Security by GitLab View product	StackHawk DAST by StackHawk View product
Overview
What it is	GitLab API Security helps teams with API Fuzzing and CI/CD Security. Explore features like API fuzz testing, cloud deployment and the closest API Security competitors.	Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.
Product type	Automated API Dynamic Security Testing & Fuzzing	CI/CD Native Dynamic Application Security Testing Platform
Best for	DevSecOps, Software Engineering, SaaS, FinTech, Healthcare	DevSecOps, Software Engineering, Financial Services, Technology
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloud	SaaSCloud
Deployment details	CI/CD Pipeline Feature; GitLab Ultimate; Native CI/CD pipeline feature; GitLab Ultimate SaaS & Self-Managed	Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI
Data residency	GitLab SaaS (US, EU) / Customer Self-Hosted	United States; Global Cloud
Key features
What it offers	Automated API DAST API fuzz testing OpenAPI specification parsing Merge request security reports CI/CD pipeline gating API Security Testing API Security DevSecOps	Developer-first DAST Automated pull request testing Authenticated session fuzzing Reproducible curl commands CI/CD security quality gates Developer-driven dynamic security testing Pull-request vulnerability triage DevSecOps
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	GitLab CI/CDRESTSOAPGraphQLOpenAPIPostman	Web ApplicationsMicroservicesCI/CD Runners
Compliance	SOC 2 Type IIISO 27001GDPRFedRAMP	SOC 2 Type IIGDPR
Integrations & coverage
Integrations	GitLab CI/CDOpenAPISwaggerPostmanHAR filesDocker	GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira
Industries	DevSecOpsSoftware EngineeringSaaSFinTechHealthcare	DevSecOpsSoftware EngineeringFinancial ServicesTechnology
Regions	GlobalUSEU	Global
Vendor
Company	GitLab	StackHawk
Headquarters	San Francisco, California, USA	Denver, Colorado, USA
Company size	2,000+	51-200
Founded	2011	2019

GitLab API Security

by GitLab

View product

StackHawk DAST

by StackHawk

View product

Overview

What it is

GitLab API Security

GitLab API Security helps teams with API Fuzzing and CI/CD Security. Explore features like API fuzz testing, cloud deployment and the closest API Security competitors.

StackHawk DAST

Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.

Product type

GitLab API Security

Automated API Dynamic Security Testing & Fuzzing

StackHawk DAST

CI/CD Native Dynamic Application Security Testing Platform

Best for

GitLab API Security

DevSecOps, Software Engineering, SaaS, FinTech, Healthcare

StackHawk DAST

DevSecOps, Software Engineering, Financial Services, Technology

Pricing

Pricing model

GitLab API Security

Contact Vendor

StackHawk DAST

Contact Vendor

Free trial

GitLab API Security

StackHawk DAST

Deployment

Deployment options

GitLab API Security

SaaSCloud

StackHawk DAST

SaaSCloud

Deployment details

GitLab API Security

CI/CD Pipeline Feature; GitLab Ultimate; Native CI/CD pipeline feature; GitLab Ultimate SaaS & Self-Managed

StackHawk DAST

Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI

Data residency

GitLab API Security

GitLab SaaS (US, EU) / Customer Self-Hosted

StackHawk DAST

United States; Global Cloud

Key features

What it offers

GitLab API Security

Automated API DAST
API fuzz testing
OpenAPI specification parsing
Merge request security reports
CI/CD pipeline gating
API Security Testing
API Security
DevSecOps

StackHawk DAST

Developer-first DAST
Automated pull request testing
Authenticated session fuzzing
Reproducible curl commands
CI/CD security quality gates
Developer-driven dynamic security testing
Pull-request vulnerability triage
DevSecOps

Platform & access

API access

GitLab API Security

StackHawk DAST

Single sign-on (SSO)

GitLab API Security

StackHawk DAST

Role-based access (RBAC)

GitLab API Security

StackHawk DAST

Multi-tenant

GitLab API Security

StackHawk DAST

Mobile app

GitLab API Security

StackHawk DAST

Supported platforms

GitLab API Security

GitLab CI/CDRESTSOAPGraphQLOpenAPIPostman

StackHawk DAST

Web ApplicationsMicroservicesCI/CD Runners

Compliance

GitLab API Security

SOC 2 Type IIISO 27001GDPRFedRAMP

StackHawk DAST

SOC 2 Type IIGDPR

Integrations & coverage

Integrations

GitLab API Security

GitLab CI/CDOpenAPISwaggerPostmanHAR filesDocker

StackHawk DAST

GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira

Industries

GitLab API Security

DevSecOpsSoftware EngineeringSaaSFinTechHealthcare

StackHawk DAST

DevSecOpsSoftware EngineeringFinancial ServicesTechnology

Regions

GitLab API Security

GlobalUSEU

StackHawk DAST

Global

Vendor

Company

GitLab API Security

GitLab

StackHawk DAST

StackHawk

Headquarters

GitLab API Security

San Francisco, California, USA

StackHawk DAST

Denver, Colorado, USA

Company size

GitLab API Security

2,000+

StackHawk DAST

51-200

Founded

GitLab API Security

2011

StackHawk DAST

2019