# StackHawk: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 65 judge labels across 3 categories by 14 of 14 models. Page: https://www.gane.ai/index/it/vendors/stackhawk

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Dynamic application security testing](https://www.gane.ai/index/it/developer/dynamic-application-security-testing/index.md) | 11% | 4 | 2% | 41 |
| [API security platforms](https://www.gane.ai/index/it/security/api-security-platforms/index.md) | 0% | 21 | 9% | 23 |
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 0% | 61 | 0% | 1 |

## What the models said for it

- "Modern mid-market / DevSecOps native | StackHawk, Escape, Bright (NeuraLegion)" (Kimi K2, DAST)
- "the best DAST tool is usually StackHawk if your team is developer-driven" (GPT-5.4 mini, DAST)
- "StackHawk — Best for Developer-Centric & Modern API-First B2B SaaS" (Gemini 3.5 Flash, DAST)
- "StackHawk is generally the top choice for modern B2B SaaS." (Gemini 3.5 Flash, DAST)

## And against it

- "42Crunch, StackHawk, and APIsec are risky as standalone choices if your main requirement is detecting and stopping attacks against live APIs." (Perplexity Sonar, API security)
- "its own docs acknowledge that scan results can include false positives, so findings still need review and confirmation" (GPT-5.4 mini, DAST)
- "Focuses almost entirely on *pre-production* security, not runtime protection. Often used alongside other runtime tools." (Qwen 3.7 Flash, API security)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 4 | 0 | 0 | 4 |
| GPT-5.4 mini | 1 | 1 | 0 | 1 | 3 |
| Gemini 3.5 Flash | 2 | 3 | 2 | 0 | 7 |
| Perplexity Sonar | 0 | 5 | 1 | 1 | 7 |
| Grok 4.20 | 0 | 5 | 4 | 0 | 9 |
| Mistral Small | 0 | 3 | 2 | 0 | 5 |
| DeepSeek V4 Flash | 0 | 6 | 0 | 0 | 6 |
| Llama 4 Maverick | 0 | 1 | 1 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 1 | 2 |
| Kimi K2 | 1 | 6 | 0 | 0 | 7 |
| GLM 4.7 FlashX | 0 | 4 | 0 | 0 | 4 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 2 | 0 | 1 | 0 | 3 |
| Muse Glimmer 30B | 0 | 3 | 2 | 0 | 5 |

## Sources returned with these answers

The sites and pages cited by the answers that named StackHawk, from 175 of the 186 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 65
- safeguard.sh: 65
- securityboulevard.com: 47
- gane.ai/index: 46
- checkmarx.com: 45
- softwaretestinghelp.com: 42
- zuplo.com: 37
- axis-intelligence.com: 35
- aimultiple.com: 34
- immuniweb.com: 32

### Pages cited

- https://softwaretestinghelp.com/dynamic-application-security-testing-dast-software: 42
- https://safeguard.sh/resources/blog/best-dast-tools-for-web-application-security-testing: 39
- https://axis-intelligence.com/best-api-security-tools-2026-tested-guide: 35
- https://zuplo.com/learning-center/best-api-security-tools-2026: 35
- https://g2.com/categories/api-security/small-business: 33
- https://immuniweb.com/resources/best-dast-tools: 29
- https://aimultiple.com/dast-tools: 27
- https://radware.com/cyberpedia/application-security/choosing-api-security-solutions: 26

## In its own words

What StackHawk's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: AI Coding Agent Security Platform (https://stackhawk.com/)
- For: coding agents (https://stackhawk.com/)
- Price stated: $10/user/mo. (https://www.stackhawk.com/pricing)
- Starting price: $10/user/mo. (https://www.stackhawk.com/pricing)
- Free plan or trial: Get started - Free 14 day trial (https://www.stackhawk.com/pricing)
- Certifications: SOC 2 Type II
- Hosting: US us-west-2, US
- Customers named: ITV, Hagerty, Change.org, Breathe Life

## What it publishes

Every page stackhawk.com exposes, read 2026-09-29: 655 addresses. By kind, pages and the last 90 days:

- blog: 337 pages, 0 in the last 90 days, latest undated
- case study: 17 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 20 pages, 0 in the last 90 days, latest undated
- conference or event: 2 pages, 0 in the last 90 days, latest undated
- report or ebook: 35 pages, 0 in the last 90 days, latest undated
- comparison: 15 pages, 0 in the last 90 days, latest undated
- template or tool: 1 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 15 pages, 0 in the last 90 days, latest undated
- podcast or video: 3 pages, 0 in the last 90 days, latest undated
- news or press: 11 pages, 0 in the last 90 days, latest undated

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.