Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

StackHawk HawkScanQualys Web Application Scanning2 of 3 products

Side-by-side comparison of StackHawk HawkScan, Qualys Web Application Scanning
Product	StackHawk HawkScan by StackHawk View product	Qualys Web Application Scanning by Qualys View product
Overview
What it is	StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.	Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.
Product type	Containerized Dynamic Security Scanning Engine	Dynamic Application Security Testing
Best for	Software Developers, DevOps Teams, Technology Startups	Cross-industry, E-commerce, Banking, Software
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	Cloud	SaaSCloud
Deployment details	Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary	Cloud; Qualys Cloud Platform SaaS; Internal virtual scanner
Data residency	Local Workstation / Pipeline Host	Global; US; EU; APAC
Key features
What it offers	Containerized DAST engine Hawkscan.yml configuration as code OpenAPI parsing Custom script injection Local terminal output Containerized DAST execution Configuration-as-code vulnerability scanning Local debugging	Automated web application scanning DAST crawling OWASP Top 10 detection REST API scanning False-positive filter Dynamic application testing OWASP flaw discovery DevSecOps CI/CD testing
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Containerized CI PipelinesDeveloper Workstations	Web AppsREST APIsCloud Workloads
Compliance	SOC 2 Type II	OWASP Top 10PCI DSSHIPAASOC 2
Integrations & coverage
Integrations	DockerKubernetesGitGitHubGitLabBitbucket	JiraJenkinsGitLabAzure DevOpsServiceNow
Industries	Software DevelopersDevOps TeamsTechnology Startups	Cross-industryE-commerceBankingSoftware
Regions	Global	Global
Vendor
Company	StackHawk	Qualys
Headquarters	Denver, Colorado, USA	Foster City, California, USA
Company size	51-200	2,000+
Founded	2019	1999

StackHawk HawkScan

by StackHawk

View product

Qualys Web Application Scanning

by Qualys

View product

Overview

What it is

StackHawk HawkScan

StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.

Qualys Web Application Scanning

Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.

Product type

StackHawk HawkScan

Containerized Dynamic Security Scanning Engine

Qualys Web Application Scanning

Dynamic Application Security Testing

Best for

StackHawk HawkScan

Software Developers, DevOps Teams, Technology Startups

Qualys Web Application Scanning

Cross-industry, E-commerce, Banking, Software

Pricing

Pricing model

StackHawk HawkScan

Contact Vendor

Qualys Web Application Scanning

Contact Vendor

Free trial

StackHawk HawkScan

Qualys Web Application Scanning

Deployment

Deployment options

StackHawk HawkScan

Cloud

Qualys Web Application Scanning

SaaSCloud

Deployment details

StackHawk HawkScan

Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary

Qualys Web Application Scanning

Cloud; Qualys Cloud Platform SaaS; Internal virtual scanner

Data residency

StackHawk HawkScan

Local Workstation / Pipeline Host

Qualys Web Application Scanning

Global; US; EU; APAC

Key features

What it offers

StackHawk HawkScan

Containerized DAST engine
Hawkscan.yml configuration as code
OpenAPI parsing
Custom script injection
Local terminal output
Containerized DAST execution
Configuration-as-code vulnerability scanning
Local debugging

Qualys Web Application Scanning

Automated web application scanning
DAST crawling
OWASP Top 10 detection
REST API scanning
False-positive filter
Dynamic application testing
OWASP flaw discovery
DevSecOps CI/CD testing

Platform & access

API access

StackHawk HawkScan

Qualys Web Application Scanning

Single sign-on (SSO)

StackHawk HawkScan

Qualys Web Application Scanning

Role-based access (RBAC)

StackHawk HawkScan

Qualys Web Application Scanning

Multi-tenant

StackHawk HawkScan

Qualys Web Application Scanning

Mobile app

StackHawk HawkScan

Qualys Web Application Scanning

Supported platforms

StackHawk HawkScan

Containerized CI PipelinesDeveloper Workstations

Qualys Web Application Scanning

Web AppsREST APIsCloud Workloads

Compliance

StackHawk HawkScan

SOC 2 Type II

Qualys Web Application Scanning

OWASP Top 10PCI DSSHIPAASOC 2

Integrations & coverage

Integrations

StackHawk HawkScan

DockerKubernetesGitGitHubGitLabBitbucket

Qualys Web Application Scanning

JiraJenkinsGitLabAzure DevOpsServiceNow

Industries

StackHawk HawkScan

Software DevelopersDevOps TeamsTechnology Startups

Qualys Web Application Scanning

Cross-industryE-commerceBankingSoftware

Regions

StackHawk HawkScan

Global

Qualys Web Application Scanning

Global

Vendor

Company

StackHawk HawkScan

StackHawk

Qualys Web Application Scanning

Qualys

Headquarters

StackHawk HawkScan

Denver, Colorado, USA

Qualys Web Application Scanning

Foster City, California, USA

Company size

StackHawk HawkScan

51-200

Qualys Web Application Scanning

2,000+

Founded

StackHawk HawkScan

2019

Qualys Web Application Scanning

1999