Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

OWASP ZAPStackHawk HawkScan2 of 3 products

Side-by-side comparison of OWASP ZAP, StackHawk HawkScan
Product	OWASP ZAP by OWASP View product	StackHawk HawkScan by StackHawk View product
Overview
What it is	OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.	StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.
Product type	Open-Source Dynamic Application Security Testing (DAST) Scanner	Containerized Dynamic Security Scanning Engine
Best for	Penetration Testers, DevSecOps, AppSec Teams, Developers	Software Developers, DevOps Teams, Technology Startups
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	Cloud	Cloud
Deployment details	Desktop Client; CLI; Container; CI/CD; Desktop GUI; CLI; Docker container; Automation framework	Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary
Data residency	Local; Self-hosted	Local Workstation / Pipeline Host
Key features
What it offers	Intercepting web proxy Automated active/passive vulnerability scanner REST API control CI/CD pipeline automation Community add-on marketplace Automated web vulnerability scanning Manual penetration testing proxy CI/CD DAST pipeline integration	Containerized DAST engine Hawkscan.yml configuration as code OpenAPI parsing Custom script injection Local terminal output Containerized DAST execution Configuration-as-code vulnerability scanning Local debugging
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: no	RBAC: yes
Multi-tenant	Multi-tenant: no	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	DesktopCI/CDCloudContainers	Containerized CI PipelinesDeveloper Workstations
Compliance	Open-source Apache 2.0OWASP Flagship Project	SOC 2 Type II
Integrations & coverage
Integrations	GitHub ActionsGitLab CIJenkinsJiraPostmanSelenium	DockerKubernetesGitGitHubGitLabBitbucket
Industries	Penetration TestersDevSecOpsAppSec TeamsDevelopers	Software DevelopersDevOps TeamsTechnology Startups
Regions	Global	Global
Vendor
Company	OWASP	StackHawk
Headquarters	Global nonprofit organization	Denver, Colorado, USA
Company size	11-50	51-200
Founded	2001	2019

OWASP ZAP

by OWASP

View product

StackHawk HawkScan

by StackHawk

View product

Overview

What it is

OWASP ZAP

OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.

StackHawk HawkScan

StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.

Product type

OWASP ZAP

Open-Source Dynamic Application Security Testing (DAST) Scanner

StackHawk HawkScan

Containerized Dynamic Security Scanning Engine

Best for

OWASP ZAP

Penetration Testers, DevSecOps, AppSec Teams, Developers

StackHawk HawkScan

Software Developers, DevOps Teams, Technology Startups

Pricing

Pricing model

OWASP ZAP

Contact Vendor

StackHawk HawkScan

Contact Vendor

Free trial

OWASP ZAP

StackHawk HawkScan

Deployment

Deployment options

OWASP ZAP

Cloud

StackHawk HawkScan

Cloud

Deployment details

OWASP ZAP

Desktop Client; CLI; Container; CI/CD; Desktop GUI; CLI; Docker container; Automation framework

StackHawk HawkScan

Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary

Data residency

OWASP ZAP

Local; Self-hosted

StackHawk HawkScan

Local Workstation / Pipeline Host

Key features

What it offers

OWASP ZAP

Intercepting web proxy
Automated active/passive vulnerability scanner
REST API control
CI/CD pipeline automation
Community add-on marketplace
Automated web vulnerability scanning
Manual penetration testing proxy
CI/CD DAST pipeline integration

StackHawk HawkScan

Containerized DAST engine
Hawkscan.yml configuration as code
OpenAPI parsing
Custom script injection
Local terminal output
Containerized DAST execution
Configuration-as-code vulnerability scanning
Local debugging

Platform & access

API access

OWASP ZAP

StackHawk HawkScan

Single sign-on (SSO)

OWASP ZAP

StackHawk HawkScan

Role-based access (RBAC)

OWASP ZAP

StackHawk HawkScan

Multi-tenant

OWASP ZAP

StackHawk HawkScan

Mobile app

OWASP ZAP

StackHawk HawkScan

Supported platforms

OWASP ZAP

DesktopCI/CDCloudContainers

StackHawk HawkScan

Containerized CI PipelinesDeveloper Workstations

Compliance

OWASP ZAP

Open-source Apache 2.0OWASP Flagship Project

StackHawk HawkScan

SOC 2 Type II

Integrations & coverage

Integrations

OWASP ZAP

GitHub ActionsGitLab CIJenkinsJiraPostmanSelenium

StackHawk HawkScan

DockerKubernetesGitGitHubGitLabBitbucket

Industries

OWASP ZAP

Penetration TestersDevSecOpsAppSec TeamsDevelopers

StackHawk HawkScan

Software DevelopersDevOps TeamsTechnology Startups

Regions

OWASP ZAP

Global

StackHawk HawkScan

Global

Vendor

Company

OWASP ZAP

OWASP

StackHawk HawkScan

StackHawk

Headquarters

OWASP ZAP

Global nonprofit organization

StackHawk HawkScan

Denver, Colorado, USA

Company size

OWASP ZAP

11-50

StackHawk HawkScan

51-200

Founded

OWASP ZAP

2001

StackHawk HawkScan

2019