StackHawk

StackHawk is an application and API security testing platform that helps engineering teams find, triage, and fix security vulnerabilities in their APIs and web applications. It provides Dynamic Application Security Testing (DAST) with deep OpenAPI spec integration, CI/CD pipeline automation, AI-powered spec generation, and an AppSec Intelligence platform for program-level visibility across the software development lifecycle.

StackHawk publishes 14 APIs on the APIs.io network, including Api Authentication API, Applications API, Global Configuration API, and 11 more. Tagged areas include API Security, Application Security, DAST, Security Testing, and Vulnerability Management.

The StackHawk catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

StackHawk’s developer surface includes authentication, documentation, API reference, getting-started guide, engineering blog, changelog, pricing, and 10 more developer resources.

🌐 Visit website 📡 Source on GitHub

44.4/100 developing ▬ flat Agent 20/100 agent aware Full breakdown ↓
scored 2026-08-25 · rubric v0.14.0

AccessFreemiumSelf serve⚡ Free to try

14 APIs

API Security Application Security DAST Security Testing Vulnerability Management

Kin Score

Kin Score How this is scored →
scored 2026-08-25 · rubric v0.14.0

Composite quality — 44.4/100 · developing

Contract Quality 14.7 / 25

Developer Ergonomics 8.8 / 20

Access Clarity 8.2 / 20

Operational Transparency 3.4 / 13

Contract Governance 1.2 / 12

Discoverability 8.2 / 10

Agent readiness — 20/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Surface 0 / 5

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/stackhawk: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 14

Individual APIs this provider publishes, each with its own machine-readable definition.

Open Collections 16

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Rate Limits 1

Documented rate limits and quota policies.

Stackhawk Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

JSON Schema 2

Standalone JSON Schema definitions for this provider's data models.

Examples 1

Example request and response payloads for these APIs.

Get Started 2

Portal, sign-up, and the first successful call

GettingStarted

GettingStarted

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

LlmsText

LlmsText

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

GitHubOrganization

GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

TrustCenter

TrustCenter

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 1

Status, limits, changes, and where to get help

ChangeLog

ChangeLog

Commercial 1

Pricing, plans, and the legal terms of use

Pricing

Pricing

Company 3

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Source (apis.yml)

aid: stackhawk
name: StackHawk
description: StackHawk is an application and API security testing platform that helps engineering teams find, triage, and
  fix security vulnerabilities in their APIs and web applications. It provides Dynamic Application Security Testing (DAST)
  with deep OpenAPI spec integration, CI/CD pipeline automation, AI-powered spec generation, and an AppSec Intelligence platform
  for program-level visibility across the software development lifecycle.
url: https://raw.githubusercontent.com/api-evangelist/stackhawk/refs/heads/main/apis.yml
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/stackhawk.png
tags:
- API Security
- Application Security
- DAST
- Security Testing
- Vulnerability Management
type: Index
access: 3rd-Party
created: '2025-01-08'
modified: '2026-05-19'
specificationVersion: '0.23'
apis:
- aid: stackhawk:stackhawk-api-authentication-api
  name: StackHawk Api Authentication API
  description: Token management and login
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - API / Authentication
  tags_raw:
  - Api Authentication
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-api-authentication-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-applications-api
  name: StackHawk Applications API
  description: Manage applications and environments
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Application
  tags_raw:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-applications-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-global-configuration-api
  name: StackHawk Global Configuration API
  description: Organization-level configurations
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Global Configuration
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-global-configuration-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-hosted-oas-api
  name: StackHawk Hosted OAS API
  description: OpenAPI spec uploads and mapping
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Hosted OAS
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-hosted-oas-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-organization-teams-api
  name: StackHawk Organization Teams API
  description: Team creation and member assignment
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Organization Teams
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-organization-teams-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-organizations-api
  name: StackHawk Organizations API
  description: Member management and audit logs
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Organization
  tags_raw:
  - Organizations
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-organizations-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-perch-api
  name: StackHawk Perch API
  description: Scan command control
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Perch
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-perch-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-profile-scans-api
  name: StackHawk Profile Scans API
  description: Profile scan analysis
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Profile Scans
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-profile-scans-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-reports-api
  name: StackHawk Reports API
  description: Scan report generation
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Reports
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-reports-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-repositories-api
  name: StackHawk Repositories API
  description: Repository management
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Repositories
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-repositories-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-scan-configuration-api
  name: StackHawk Scan Configuration API
  description: Scan configuration file management
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Scan Configuration
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-scan-configuration-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-scan-policies-api
  name: StackHawk Scan Policies API
  description: Security policy management
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Scan Policies
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-scan-policies-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-scan-results-api
  name: StackHawk Scan Results API
  description: Scan result reporting and findings
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - Scan Results
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-scan-results-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
- aid: stackhawk:stackhawk-user-api
  name: StackHawk User API
  description: Authenticated user information
  humanURL: https://apidocs.stackhawk.com/docs
  baseURL: https://api.stackhawk.com
  tags:
  - User
  properties:
  - type: OpenAPI
    url: openapi/stackhawk-user-api-openapi.yml
  - type: Documentation
    url: https://apidocs.stackhawk.com/docs
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/stackhawk/overview
- type: AgenticAccess
  url: agentic-access/stackhawk-agentic-access.yml
- type: TrustCenter
  url: security/stackhawk-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/stackhawk-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/stackhawk-domain-security.yml
- type: Authentication
  url: authentication/stackhawk-authentication.yml
- type: GitHubOrganization
  url: https://github.com/stackhawk
- type: LinkedIn
  url: https://www.linkedin.com/company/stackhawk
- type: Website
  url: https://www.stackhawk.com/
  name: StackHawk Website
- type: Documentation
  url: https://docs.stackhawk.com/
  name: StackHawk Documentation
- type: APIReference
  url: https://apidocs.stackhawk.com/docs
  name: API Reference
- type: GettingStarted
  url: https://docs.stackhawk.com/
  name: Getting Started
- type: Blog
  url: https://www.stackhawk.com/blog/
  name: StackHawk Blog
- type: ChangeLog
  url: https://docs.stackhawk.com/changelog.html
  name: Changelog
- type: Pricing
  url: https://www.stackhawk.com/pricing/
  name: Pricing
- type: Login
  url: https://app.stackhawk.com/
  name: StackHawk App
- type: LlmsText
  url: https://docs.stackhawk.com/llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/stackhawk"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/stackhawk/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/stackhawk/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.