# StackHawk alternatives: what AI models name instead, November 2026

Gane Index, November 2026 Edition. 360 of the 504 answers in the 2 categories where StackHawk holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://www.gane.ai/index/it/vendors/stackhawk/alternatives

## Named instead, most often (every category and segment added)

- Salt Security: 47
- Invicti: 41
- OWASP ZAP: 29
- Cloudflare API Shield: 16
- Akamai API Security: 14
- Wallarm API Security: 12

## Dynamic application security testing

**Small business**: 39 of 84 answers did not name StackHawk (StackHawk is #3 of 13 at 13%).

- OWASP ZAP: first choice in 19 of those 39
- Intruder: first choice in 5 of those 39
- Acunetix: first choice in 3 of those 39
- Blacksight: first choice in 1 of those 39
- Jit: first choice in 1 of those 39
- Nuclei: first choice in 1 of those 39
- OWASP ZAP – Zed Attack Proxy: first choice in 1 of those 39
- Probely: first choice in 1 of those 39

**Mid-market**: 49 of 84 answers did not name StackHawk (StackHawk is #4 of 13 at 11%).

- OWASP ZAP: first choice in 8 of those 49
- Invicti: first choice in 7 of those 49
- Acunetix: first choice in 6 of those 49
- Bright Security: first choice in 1 of those 49
- Burp Suite Enterprise Edition: first choice in 1 of those 49
- Escape: first choice in 1 of those 49
- Intruder: first choice in 1 of those 49
- Invicti, formerly Netsparker: first choice in 1 of those 49

**Enterprise**: 76 of 84 answers did not name StackHawk (StackHawk is #12 of 14 at 0%).

- Invicti: first choice in 34 of those 76
- Burp Suite DAST: first choice in 6 of those 76
- Burp Suite: first choice in 3 of those 76
- Burp Suite Enterprise Edition: first choice in 2 of those 76
- HCL AppScan: first choice in 2 of those 76
- ImmuniWeb Neuron: first choice in 2 of those 76
- Astra Security: first choice in 1 of those 76
- Bright Security: first choice in 1 of those 76

## API security platforms

**Small business**: 46 of 84 answers did not name StackHawk (StackHawk is #4 of 13 at 8%).

- Cloudflare API Shield: first choice in 12 of those 46
- Wallarm API Security: first choice in 3 of those 46
- Indusface AppTrana: first choice in 2 of those 46
- Zuplo: first choice in 2 of those 46
- 42Crunch: first choice in 1 of those 46
- Aikido Runtime Protection: first choice in 1 of those 46
- Cloudflare API Security: first choice in 1 of those 46
- Cloudflare Application Security: first choice in 1 of those 46

**Mid-market**: 70 of 84 answers did not name StackHawk (StackHawk is #13 of 15 at 0%).

- Salt Security: first choice in 15 of those 70
- Wallarm API Security: first choice in 5 of those 70
- Zuplo: first choice in 5 of those 70
- Cloudflare API Shield: first choice in 4 of those 70
- Akamai API Security: first choice in 3 of those 70
- Akto: first choice in 2 of those 70
- Noname Security: first choice in 2 of those 70
- OWASP ZAP: first choice in 2 of those 70

**Enterprise**: 80 of 84 answers did not name StackHawk.

- Salt Security: first choice in 32 of those 80
- Akamai API Security: first choice in 11 of those 80
- Traceable API Security Platform: first choice in 4 of those 80
- Wallarm API Security: first choice in 4 of those 80
- 42Crunch: first choice in 2 of those 80
- Apigee: first choice in 2 of those 80
- Gravitee: first choice in 2 of those 80
- Tyk: first choice in 2 of those 80

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.