# StackHawk

**Canonical:** https://apis.io/providers/stackhawk/  
**Website:** https://www.stackhawk.com/  
**APIs profiled:** 14

StackHawk is an application and API security testing platform that helps engineering teams find, triage, and fix security vulnerabilities in their APIs and web applications. It provides Dynamic Application Security Testing (DAST) with deep OpenAPI spec integration, CI/CD pipeline automation, AI-powered spec generation, and an AppSec Intelligence platform for program-level visibility across the software development lifecycle.

## Kin Score — 44.4 / 100 (developing)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 44.4).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 58.6 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 44.0 |
| Commercial Clarity | 40.8 |
| Access Clarity | 40.8 |

## Agent readiness — 19.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (14)

- **StackHawk Api Authentication API** — Token management and login
- **StackHawk Applications API** — Manage applications and environments
- **StackHawk Global Configuration API** — Organization-level configurations
- **StackHawk Hosted OAS API** — OpenAPI spec uploads and mapping
- **StackHawk Organization Teams API** — Team creation and member assignment
- **StackHawk Organizations API** — Member management and audit logs
- **StackHawk Perch API** — Scan command control
- **StackHawk Profile Scans API** — Profile scan analysis
- **StackHawk Reports API** — Scan report generation
- **StackHawk Repositories API** — Repository management
- **StackHawk Scan Configuration API** — Scan configuration file management
- **StackHawk Scan Policies API** — Security policy management
- **StackHawk Scan Results API** — Scan result reporting and findings
- **StackHawk User API** — Authenticated user information

## Agentic access (1)

- **Stackhawk Agentic Access** — 54 operations · 25 acting

## Security (4)

- **Stackhawk Authentication** — http · 1 scheme
- **Stackhawk Domain Security** — TLSv1.3 · HSTS · DMARC
- **Stackhawk Vulnerability Disclosure** — security.txt · contact published
- **Stackhawk Trust Center** — SOC 2

## Plans (1)

- **Stackhawk Plans Pricing**

## Tags

API Security, Application Security, DAST, Security Testing, Vulnerability Management

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/stackhawk/). Scores are computed from the provider's own public artifacts under a published rubric.