What StackHawk is
StackHawk is a developer-first DAST, and it shows every step of the way. They're built to scan quickly, in pipeline, and make it easy to attempt to reproduce issues. They're a major player in reshaping modern DAST and have really paved a way for the future with features like fuzzing API specific data. The vendor site is www.stackhawk.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What StackHawk covers
StackHawk is in the catalog for these capabilities. Categories: DAST and API Security. Catalog tags: Open Source, Hands-on, Best for Enterprise, and Best for MidMarket.
How to evaluate StackHawk in a security program
Use StackHawk as a stack candidate, not as diligence evidence. The oneNorma score for StackHawk is 6/10 (percentile 83). If the real gap is in DAST and API Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.stackhawk.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
