Name: StackHawk Demo at SnykCon
Uploaded: 2020-10-22T21:59:25.000Z
Duration: 11 min 14 s
Description: StackHawk Demo

Help Desk

Web and Video Conferencing

Customer Support

AI Development

Innovation Management

Text Editors

Version Control

Development

Business Intelligence (BI)

Business Process Management (BPM)

Collaboration

Corporate Social Responsibility (CSR)

Enterprise Legal Management

Enterprise Search

Online Notary

Transportation & Logistics

Enterprise

Accounting

Accounting and Tax Services

Accounts Receivable

Blockchain Payments

Financial Risk Management

Travel Management

Treasury Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

AI Governance

Application Delivery Controllers (ADC)

Change Management

Cloud Storage

Complex Event Processing

Configuration Management

Custom Software Development Services

Data Deduplication

Density-Optimized Servers

Fraud Detection

Integration Platform as a Service (iPaaS)

IoT Device Management

LAN Switches

Mainframe Monitoring

Managed DNS

Migration

Network Performance Monitoring

OpenStack Cloud

Privileged Access Management

Remote Desktop

System Monitoring

Unified Communications Monitoring

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Content Management

Contest Management

Email Marketing

Market Intelligence

Marketing Automation

Mobile Advertising

Product Intelligence

Referral Marketing

Social Media Management

Survey & Forms Building

Web Analytics

Marketing

Project Management

Professional Services

Customer Relationship Management (CRM)

Headless eCommerce

Sales Enablement

Sales Engagement

Sales

GDPR Compliance

Intrusion Detection

Operational Technology (OT) Security

Security

Fleet Maintenance

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Veracode

Checkmarx

Fortify by OpenText

OpenText

HCL AppScan

HCLSoftware

Rapid7 InsightAppSec

Rapid7

Rapid7 AppSpider

Sentinel Dynamic

Synopsys

Trustwave App Scanner (discontinued)

Trustwave

ARTEMIS by Repello

Repello AI

Barrion

Beyond Security beSTORM

Fortra

### Application Security Testing
Users generally praise StackHawk for its robust application security testing capabilities. The tool's dynamic application security testing (DAST) functionality is highly regarded for its ability to efficiently identify and mitigate security vulnerabilities in applications. Reviewers appreciate the thoroughness and ease of use of StackHawk's security scanning features, which provide valuable insights into potential security risks. Additionally, users highlight the tool's effectiveness in enhancing the overall security posture of their applications by proactively addressing security issues.

### Security Vulnerability Management
User sentiment about StackHawk's security vulnerability management capabilities varies widely. While some users appreciate the detailed descriptions of vulnerabilities and the ease of use, others express a desire for more augmented detection capabilities and faster scan times. The tool's ability to identify and provide remediation tips for security vulnerabilities is generally well-received, although some users encounter challenges with setup and integration, particularly in non-containerized environments. StackHawk's support team is commended for their responsiveness in resolving troubleshooting issues, contributing to a positive user experience overall.

### Security Issue Identification and Management
Users consistently highlight StackHawk's prowess in swiftly identifying and effectively managing security issues within their applications. The tool's ability to proactively pinpoint vulnerabilities, coupled with its user-friendly interface for generating actionable reports, has garnered widespread acclaim. Additionally, the platform's capacity to facilitate early detection of security flaws, even in complex software environments, has significantly bolstered users' confidence in the overall security posture of their systems.

### CI/CD Integration
Users generally praise StackHawk's robust CI/CD integration capabilities. The feedback highlights the ease of setup and use, whether through Docker images or the CLI tool, making it effortless to automate security testing within the CI/CD pipeline. The detailed reports generated are commended for their clarity and accessibility, aiding both developers and management in understanding and addressing vulnerabilities efficiently. Additionally, the quick scan times and the ability to scan applications locally contribute to an effective integration process, ensuring early detection and mitigation of security issues. The supportive and responsive nature of the StackHawk team further enhances the overall user experience with the CI/CD integration aspect of the tool.

### Development and Operations (DevOps
Users consistently praise StackHawk's integration into the development lifecycle and its support for DevOps practices. They highlight the ease of setting up and running scans against web applications within minutes, emphasizing the tool's intuitive nature and well-documented steps for integration. Additionally, users appreciate the detailed yet easy-to-read reports generated by StackHawk, which have proven valuable for sharing with stakeholders and increasing confidence in platform security. The tool's ability to facilitate automated security testing early in the development process has been a key factor in helping teams stay proactive in addressing potential issues. Furthermore, users have found the support provided by StackHawk's team to be incredibly helpful and responsive, further enhancing the overall experience of incorporating the tool into their CI/CD pipelines.

### Continuous Integration and Deployment
Users consistently praise StackHawk's real-time scanning capabilities in continuous integration and deployment environments. The ability to effortlessly integrate security scans into their continuous delivery workflow has been a significant advantage for teams operating in dynamic development environments. While some users have noted the longer scan times compared to traditional static code analysis tools, the overall consensus leans towards the effectiveness and ease of use of StackHawk's continuous integration and deployment features.

### Container and Docker Security
Users generally praise StackHawk for its robust container and docker security capabilities, highlighting the ease of integration with Docker containers for running scans efficiently. The tool's ability to provide detailed yet easily understandable reports on vulnerabilities detected within containerized environments has garnered positive feedback from reviewers. While some users have mentioned minor inconveniences related to setup processes involving Docker images, the overall consensus leans towards acknowledging StackHawk's strength in ensuring secure containerized applications through effective security measures.

### API and Web Application Security
Users consistently highlight StackHawk's robust capabilities in enhancing API and web application security. The tool's ability to swiftly identify vulnerabilities in REST and GraphQL APIs, along with its user-friendly interface and thorough scanning features, has garnered positive feedback. While some initial challenges were reported with GraphQL endpoint scans, the proactive support from the StackHawk team in addressing these issues has been commended. Additionally, the tool's versatility in scanning various types of APIs, quick scan times, and customizable resources have been praised for aiding in early vulnerability detection and ensuring a secure development ecosystem.

### Dynamic Testing Tools
Users have expressed satisfaction with the accuracy and ease of use of StackHawk's dynamic testing tools. The tool's integration with CI/CD pipelines and support for Docker environments have been highlighted as beneficial features. While some users have mentioned minor issues such as the need for more detailed logs and reduced false positives, overall, StackHawk's dynamic testing tools seem to be well-received by the user base.

### Automated Security Solutions
Users consistently praise StackHawk's automated security solutions for simplifying security scans and enhancing overall security posture. The automated dynamic security testing feature has been highlighted as a valuable tool in catching vulnerabilities promptly. While some users appreciate the ease of integration into CI/CD pipelines and the detailed reports generated, others express minor concerns about the manual process of retrieving oauth credentials. Despite this, the general sentiment leans towards the effectiveness and efficiency of StackHawk's automated security solutions in bolstering security measures.

### Code Analysis and Debugging
Users appreciate StackHawk's thorough approach to code analysis and debugging, noting its ability to pinpoint vulnerabilities that other tools may overlook. While some users find the scanning process time-consuming, they acknowledge the value of StackHawk's detailed reports and user-friendly interface in facilitating efficient issue resolution. Additionally, the platform's pricing model is commended for its accessibility and transparency, making it a cost-effective solution for organizations of varying sizes.

StackHawk provides a comprehensive solution for developers who want to maintain secure applications without sacrificing efficiency. By integrating with the CI pipeline, StackHawk keeps the code safe from vulnerabilities and notifies developers of new ones that may be introduced. This has been a game-changer for businesses that are looking to scale their security posture while maintaining reasonable costs.

Small teams with limited capacity can leverage StackHawk's capability to provide security awareness and maintenance, which helps improve efficiency and reduces development costs without requiring external security groups or pen testers. The product is also beneficial in finding security bugs in live coding and suggesting solutions, preventing potential losses for organizations. With the ability to monitor both production environments and websites for missed security issues, StackHawk allows businesses to stay up-to-date with new technologies and achieve SOC2 compliance requirements with minimal effort.

StackHawk is a solution designed to make it simple for developers to find, triage, and fix application security bugs, from the company of the same name headquartered in Denver. Scan an application for AppSec bugs in the code, triage and fix with provided documentation, and automate in the development pipeline to prevent future bugs from hitting production.

GitLab Essential

GitLab Premium

GitLab Ultimate

GitLab

AcuSensor from Maltese company Acunetix is application security and testing software.

Websites Scanned: 5

Websites Scanned: 6-10

Websites Scanned: 11-20

Websites Scanned: 21-35

Websites Scanned: 36-50

Websites Scanned: Over 50

Acunetix by Invicti

StackHawk

Application Security Testing is a key element of ensuring that web applications remain secure. Various tools and managed services exist to provide continuous testing, besides application security platforms that include app testing as part of their functionality. Dynamic Application Security Tests (DAST) scans applications for vulnerabilities while they are running or in production, simulating real life conditions.

Dynamic Application Security Testing (DAST)

Learn how to run security testing against your GraphQL APIs with StackHawk (https://stackhawk.com). 

StackHawk's application security tool makes it easy for developers to find, triage, and fix security bugs before they hit production. In this demo, Co-Founder and Chief Security Officer, Scott Gerlach, walks through an example of testing a sample GraphQL application for security bugs.

If you'd like to follow along in testing yourself, the details are outlined in this blog: https://www.stackhawk.com/blog/automated-graphql-security-testing/

The video covers:
+ Setting up the stackhawk.yml file
+ Enabling the security scanner to discover the GraphQL introspection endpoint
+ Running an API security scan of your GraphQL API
+ Reviewing the findings in the terminal or in the StackHawk application
+ Digging into security bugs such as Remote Command Injection and SQL Injection

Sign up for a free trial or request a demo at https://stackhawk.com, or feel free to reach out for support at support@stackhawk.com.

GraphQL Security Testing with StackHawk

StackHawk Demo at SnykCon

Introducing the StackHawk CLI: Technical Demo

Stackhawk Demo - Ryan Severns

AWS Live Hack Workshop: Snyk and StackHawk

A demo of StackHawk's dynamic application security testing platform that aired at SnykCon 2020.

Learn about automated AppSec testing in CI/CD, dynamic application security tests for modern web apps, and more.

For more information or to sign up for a free trial, visit https://stackhawk.com.

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Dynamic Application Security Testing (DAST) Tools

StackHawk

Overview

What is StackHawk?