StackHawk HawkScan

StackHawk HawkScan is the high-performance, containerized dynamic application and API security scanner that powers the StackHawk developer-first security platform. Packaged as a lightweight Docker container, HawkScan is designed to be downloaded, configured, and executed within automated continuous integration (CI) workflows, developer local workstations, or test staging environments. Configuration is managed via simple, version-controlled hawkscan.yml configuration files that live directly alongside application source code in Git repositories, allowing engineering teams to define scan scopes, authentication sequences, and custom test rules as code. HawkScan dynamically crawls and probes running web applications and APIs, parsing OpenAPI specifications and GraphQL schemas to thoroughly test application logic against the OWASP Top 10 and OWASP API Top 10 vulnerabilities. Because HawkScan runs in containerized environments, it safely tests ephemeral local builds against mock databases, uncovering exploitable vulnerabilities before software artifacts are deployed to staging or production environments. HawkScan outputs scan results directly to developer terminal logs and synchronizes detailed findings with the StackHawk web platform for centralized reporting, vulnerability management, and trend analysis across engineering organizations.