Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Qualys Web Application ScanningStackHawk DAST2 of 3 products

Side-by-side comparison of Qualys Web Application Scanning, StackHawk DAST
Product	Qualys Web Application Scanning by Qualys View product	StackHawk DAST by StackHawk View product
Overview
What it is	Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.	Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.
Product type	Dynamic Application Security Testing	CI/CD Native Dynamic Application Security Testing Platform
Best for	Cross-industry, E-commerce, Banking, Software	DevSecOps, Software Engineering, Financial Services, Technology
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloud	SaaSCloud
Deployment details	Cloud; Qualys Cloud Platform SaaS; Internal virtual scanner	Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI
Data residency	Global; US; EU; APAC	United States; Global Cloud
Key features
What it offers	Automated web application scanning DAST crawling OWASP Top 10 detection REST API scanning False-positive filter Dynamic application testing OWASP flaw discovery DevSecOps CI/CD testing	Developer-first DAST Automated pull request testing Authenticated session fuzzing Reproducible curl commands CI/CD security quality gates Developer-driven dynamic security testing Pull-request vulnerability triage DevSecOps
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Web AppsREST APIsCloud Workloads	Web ApplicationsMicroservicesCI/CD Runners
Compliance	OWASP Top 10PCI DSSHIPAASOC 2	SOC 2 Type IIGDPR
Integrations & coverage
Integrations	JiraJenkinsGitLabAzure DevOpsServiceNow	GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira
Industries	Cross-industryE-commerceBankingSoftware	DevSecOpsSoftware EngineeringFinancial ServicesTechnology
Regions	Global	Global
Vendor
Company	Qualys	StackHawk
Headquarters	Foster City, California, USA	Denver, Colorado, USA
Company size	2,000+	51-200
Founded	1999	2019

Qualys Web Application Scanning

by Qualys

View product

StackHawk DAST

by StackHawk

View product

Overview

What it is

Qualys Web Application Scanning

Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.

StackHawk DAST

Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.

Product type

Qualys Web Application Scanning

Dynamic Application Security Testing

StackHawk DAST

CI/CD Native Dynamic Application Security Testing Platform

Best for

Qualys Web Application Scanning

Cross-industry, E-commerce, Banking, Software

StackHawk DAST

DevSecOps, Software Engineering, Financial Services, Technology

Pricing

Pricing model

Qualys Web Application Scanning

Contact Vendor

StackHawk DAST

Contact Vendor

Free trial

Qualys Web Application Scanning

StackHawk DAST

Deployment

Deployment options

Qualys Web Application Scanning

SaaSCloud

StackHawk DAST

SaaSCloud

Deployment details

Qualys Web Application Scanning

Cloud; Qualys Cloud Platform SaaS; Internal virtual scanner

StackHawk DAST

Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI

Data residency

Qualys Web Application Scanning

Global; US; EU; APAC

StackHawk DAST

United States; Global Cloud

Key features

What it offers

Qualys Web Application Scanning

Automated web application scanning
DAST crawling
OWASP Top 10 detection
REST API scanning
False-positive filter
Dynamic application testing
OWASP flaw discovery
DevSecOps CI/CD testing

StackHawk DAST

Developer-first DAST
Automated pull request testing
Authenticated session fuzzing
Reproducible curl commands
CI/CD security quality gates
Developer-driven dynamic security testing
Pull-request vulnerability triage
DevSecOps

Platform & access

API access

Qualys Web Application Scanning

StackHawk DAST

Single sign-on (SSO)

Qualys Web Application Scanning

StackHawk DAST

Role-based access (RBAC)

Qualys Web Application Scanning

StackHawk DAST

Multi-tenant

Qualys Web Application Scanning

StackHawk DAST

Mobile app

Qualys Web Application Scanning

StackHawk DAST

Supported platforms

Qualys Web Application Scanning

Web AppsREST APIsCloud Workloads

StackHawk DAST

Web ApplicationsMicroservicesCI/CD Runners

Compliance

Qualys Web Application Scanning

OWASP Top 10PCI DSSHIPAASOC 2

StackHawk DAST

SOC 2 Type IIGDPR

Integrations & coverage

Integrations

Qualys Web Application Scanning

JiraJenkinsGitLabAzure DevOpsServiceNow

StackHawk DAST

GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira

Industries

Qualys Web Application Scanning

Cross-industryE-commerceBankingSoftware

StackHawk DAST

DevSecOpsSoftware EngineeringFinancial ServicesTechnology

Regions

Qualys Web Application Scanning

Global

StackHawk DAST

Global

Vendor

Company

Qualys Web Application Scanning

Qualys

StackHawk DAST

StackHawk

Headquarters

Qualys Web Application Scanning

Foster City, California, USA

StackHawk DAST

Denver, Colorado, USA

Company size

Qualys Web Application Scanning

2,000+

StackHawk DAST

51-200

Founded

Qualys Web Application Scanning

1999

StackHawk DAST

2019