68 StackHawk Reviews
Easy to integrate, unlimited scans and applications allowed in the plan, performs well, dockerized Review collected by and hosted on G2.com.
I wish there were more visibility into the types of rules or inputs that the scanner is using under the hood Review collected by and hosted on G2.com.
The integration with my application was seamless. I just had to deploy a docker and run it, and the stat scanner reported the vulnerabilities almost instantly. Review collected by and hosted on G2.com.
StackHawk can improve the description of the vulnerabilities slightly to debug the issue faster. Stackhawk can give more examples for fixing security issues reported. Review collected by and hosted on G2.com.
As we progress towards the future, Modern problems require modern solutions! StackHack is the perfect go-ahead for your business needs! Review collected by and hosted on G2.com.
The frequent updates with new technologies, but it's good to have the updates to stay ourselves protected! Review collected by and hosted on G2.com.
We've had nothing but a great experience working with the StackHawk team and their security automation tool. Our team operates in a continuous delivery environment, with several concurrent branches and environments at any given time. We release code several times per day, and StackHawk is able to provide us real-time scans of all of our branches, environments, and production deploys without any additional developer effort beyond initial setup. Review collected by and hosted on G2.com.
We had some initial issues with getting the scans to work with our GraphQL endpoints, but we were able to work closely with the StackHawk team, and this has since become a non-issue. I'm not aware of many other dynamic security testing providers that have such robust GraphQL support. Kudos to the StackHawk team for leaning in and delivering an excellent solution for GraphQL security testing. Review collected by and hosted on G2.com.
-Very strong CI/CD integration
-Augmented security detections to ZAP
-A slick, fast UI
-Supportive staff when we have questions Review collected by and hosted on G2.com.
-Needs more augmented detection to discover real risks
-Needs ability for custom detections/plugins
-More customization on findings and options for suppression
-Faster scans! Review collected by and hosted on G2.com.
Good tool for Dynamic App Scanning. Can greatly help with the Vulnerablity identification and remediation process Review collected by and hosted on G2.com.
Does not seem to be a way to scan multipage/multisite applications or Mobile. Review collected by and hosted on G2.com.
Incredibly easy to integrate into our CI/CD pipeline using their provided Docker image and detailed guides.
It produces detailed yet easy-to-read reports that are suitable for sharing with stakeholders. StackHawk has helped increase stakeholder confidence in platform security.
It has helped us make automated security testing one of the first things we do when spinning up a new project. StackHawk has helped us stay on top of issues early in the development process.
The team is incredibly supportive and helpful if you run into any issues. Review collected by and hosted on G2.com.
I wish there was a more automated flow for retrieving oauth credentials for your api/site when running tests, it is a bit manual at the moment. Review collected by and hosted on G2.com.
In matters of minutes, one can set up and run a full scan against a web application. The intuitive and well-documented steps about how to integrate Stackhawk into the development lifecycle(build workflows, notifications) enabled us to get straight to what matters, which is the scan results.
Stackhawk's support was really helpful when needed. Review collected by and hosted on G2.com.
Some dashboard items could be improved, such as an option to export scan results to pdf and/or other formats; the scan page could be a bit less populated.
Also, a pay per scan plan would be well appreciated. Review collected by and hosted on G2.com.
- StackHawk is easy to take in to use
- Built on the ZAP scanner, and they support its development as well
- You can run it in different environments with Docker
- Produces clear reports on the findings, and you can manage them with the UI so that false positives don't show up on every scan Review collected by and hosted on G2.com.
I don't have anything to complain about. Their support solved all the problems we had during the onboarding process. Maybe it would be beneficial to have an even more detailed log on the scanner's action to debug issues. Review collected by and hosted on G2.com.
