My experience with StackHawk has been very credible, and I would rate them a five out of five. I chose five out of five for StackHawk for a couple of reasons: it enables me to set up any type of authenticated scans due to its YAML configuration setup, and it is possible to run internal scans since it only needs the binary to run it. Customer support has also been very great so far; they are always ready to answer any questions. Even their bot helps a lot. The integration they have with Snyk makes it great for deeper analysis, enabling us to make data-driven decisions easily. Regarding governance and security for StackHawk AI capabilities, I feel the AI features are managed in a way that ensures my data is kept safe and that there are good controls or transparency about how the AI is used. I absolutely trust how StackHawk handles sensitive information or automates decisions using AI. StackHawk accuracy and reliability of output have been consistent and trustworthy in our experience, and I love it. It focuses on transparency and secure practices, which builds confidence in using AI for our application security. My experience with StackHawk has been very positive, and I highly recommend integrating StackHawk into your CI/CD pipeline early, starting with the critical applications and configuring scans to match your security needs. I encourage you to take time to understand the findings and tune scan settings to reduce false positives. This will help your team identify vulnerabilities earlier, improve efficiency, and also get the most value from the platform. I would rate StackHawk a five out of five overall.
I don't actually have a clear perspective on StackHawk's AI capabilities regarding its governance and security. My advice to others looking into using StackHawk is to stay prepared. Document how your architecture works, whether you have decoupled services or not. Based on that, it will be easier or not to use the application. In our case, we had to deploy an agent within our cluster and that was the only way we could analyze our microservices. So be prepared, especially technically, because they can help a lot in different areas, but you're the owner of your own infrastructure, so it relies on you how you're going to implement the solution. My overall rating for this review is seven out of ten.
Manager Sec Ops at a real estate/law firm with 501-1,000 employees
Real User
Top 20
Jan 14, 2026
StackHawk is deployed in my organization in the public cloud using the configuration on their site. I use AWS as my cloud provider. I rate this product an eight out of ten.
StackHawk provides a dynamic application security testing tool designed to identify and fix vulnerabilities in modern CI/CD workflows quickly. It seamlessly integrates into developers' pipelines to deliver real-time feedback, helping teams prioritize and address application security efficiently.Known for its developer-first approach, StackHawk empowers teams to conduct proactive security testing at every stage of the software development lifecycle. It offers robust scanning capabilities that...
My experience with StackHawk has been very credible, and I would rate them a five out of five. I chose five out of five for StackHawk for a couple of reasons: it enables me to set up any type of authenticated scans due to its YAML configuration setup, and it is possible to run internal scans since it only needs the binary to run it. Customer support has also been very great so far; they are always ready to answer any questions. Even their bot helps a lot. The integration they have with Snyk makes it great for deeper analysis, enabling us to make data-driven decisions easily. Regarding governance and security for StackHawk AI capabilities, I feel the AI features are managed in a way that ensures my data is kept safe and that there are good controls or transparency about how the AI is used. I absolutely trust how StackHawk handles sensitive information or automates decisions using AI. StackHawk accuracy and reliability of output have been consistent and trustworthy in our experience, and I love it. It focuses on transparency and secure practices, which builds confidence in using AI for our application security. My experience with StackHawk has been very positive, and I highly recommend integrating StackHawk into your CI/CD pipeline early, starting with the critical applications and configuring scans to match your security needs. I encourage you to take time to understand the findings and tune scan settings to reduce false positives. This will help your team identify vulnerabilities earlier, improve efficiency, and also get the most value from the platform. I would rate StackHawk a five out of five overall.
I don't actually have a clear perspective on StackHawk's AI capabilities regarding its governance and security. My advice to others looking into using StackHawk is to stay prepared. Document how your architecture works, whether you have decoupled services or not. Based on that, it will be easier or not to use the application. In our case, we had to deploy an agent within our cluster and that was the only way we could analyze our microservices. So be prepared, especially technically, because they can help a lot in different areas, but you're the owner of your own infrastructure, so it relies on you how you're going to implement the solution. My overall rating for this review is seven out of ten.
StackHawk is deployed in my organization in the public cloud using the configuration on their site. I use AWS as my cloud provider. I rate this product an eight out of ten.