Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Great DAST Scanner that empowers developers
What do you like best about the product?
Easy to configure applications, containerized scanning, high-quality API & GraphQL scanning, and unlimited application scanning
What do you dislike about the product?
We are currently working with the StackHawk team to reduce the number of false positives. Since the scanner works off of ZAP, improvements can be made to reduce the number of false positives in the scans. Additionally, recommendations can be improved to include action items relevant to the developer.
What problems is the product solving and how is that benefiting you?
Traditional DAST scanners scan a few assets at a scheduled time and can only find vulnerabilities after they have hit production. StackHawk allows us to empower developers and scan an unlimited number of applications before issues hit production. Additionally, StackHawk offers GraphQL and API scanning capabilities not found with other vendors.
- Leave a Comment |
- Mark review as helpful
Easy and efficient scanning tool
What do you like best about the product?
- StackHawk is easy to take in to use
- Built on the ZAP scanner, and they support its development as well
- You can run it in different environments with Docker
- Produces clear reports on the findings, and you can manage them with the UI so that false positives don't show up on every scan
- Built on the ZAP scanner, and they support its development as well
- You can run it in different environments with Docker
- Produces clear reports on the findings, and you can manage them with the UI so that false positives don't show up on every scan
What do you dislike about the product?
I don't have anything to complain about. Their support solved all the problems we had during the onboarding process. Maybe it would be beneficial to have an even more detailed log on the scanner's action to debug issues.
What problems is the product solving and how is that benefiting you?
We use it to catch security problems automatically during the development process and use the results it generates when we plan for security audits.
Very good on boarding process
What do you like best about the product?
The onboarding process to get the tests running is very helpful. The StackHawk employees take the time if you have questions, and they are very willing to help.
I like the technology of the test tool.
I like the technology of the test tool.
What do you dislike about the product?
I got some problems with our corporate firewall/proxy. It's not easy to get this running. But even thought StackHawk helped to look into the isuues.
What problems is the product solving and how is that benefiting you?
To find security issues in our apps. Without any big changes in our apps StackHawk is scanning the apps.
Recommendations to others considering the product:
Ask questions if you have any problems setting up StackHawk.
StackHawk Eases My Mind
What do you like best about the product?
As a cybersecurity professional, I constantly worry about vulnerabilities in our applications. StackHawk outlines exactly what we need to do to make the application more secure, and I don't have to go about my day worrying about what might be out there without my knowledge. It does all of the scanning that would have previously taken hours, and it does it in a matter of minutes. This leaves more time in my day to focus on other aspects of security.
What do you dislike about the product?
I have not found anything to dislike yet.
What problems is the product solving and how is that benefiting you?
Through the initial scan, we learned of numerous vulnerabilities in our application, and we were provided with the severity of each. These were not obvious to us before the scan, so we gained immense insight from this.
Stackhawk offers a cutting edge DAST tool that integrates the way we need it to
What do you like best about the product?
After evaluating several vendors, We chose to use Stackhawk because of how well it integrated with our CI/CD process and that it works really well in containers, whereas most competitors are harder (or impossible) to implement with our configuration. Their team is engaged and responsive. Their solution is modern and easy to use. I'm happy we selected this solution.
What do you dislike about the product?
I don't have any complaints about using Stackhawk.
What problems is the product solving and how is that benefiting you?
The key benefit for us of using Stackhawk is having a Dynamic Application Security Testing (DAST) tool that runs in our containers effectively. This has been a key differentiator for us.
In-depth and invaluable security insight packaged into the best UI you've ever seen
What do you like best about the product?
The detailed descriptions of vulnerabilities and linked cheatsheets are incredibly helpful, especially for busy developers that may not have done any work on fixing security bugs. The UI is extremely easy on the eyes and one of the most well designed I've ever seen, the same goes for the UX.
What do you dislike about the product?
Besides the CI setup issue we had which I believe was more of a codebase issue than a StackHawk issue (I wasn't involved), there really isn't anything currently in StackHawk that I have an issue with.
What problems is the product solving and how is that benefiting you?
We haven't had a lot of time to focus on security just yet, but we (I) am definitely looking forward to getting to the point where we are less pressured by a deadline and can focus on using StackHawk to start resolving the major issues with our codebase.
StackHawk is awesome!
What do you like best about the product?
StackHawk does a great job scanning my applications for security vulnerabilities. This helps me have a leaner staff because I don't need to hire a dedicated security specialist.
What do you dislike about the product?
I wish the scans for frontend apps were a bit more comprehensive.
What problems is the product solving and how is that benefiting you?
StackHawk helps me solve my security problems without having to hire additional staff who specialize in security.
Helps ensure we can sleep easy
What do you like best about the product?
Breadth and depth of scan
Also ease of setup, great support and an intuitive UI!
Also ease of setup, great support and an intuitive UI!
What do you dislike about the product?
None of note. As always, looking forward to new scans!
What problems is the product solving and how is that benefiting you?
StackHawk has flagged some important vulnerabilities in our app that we've now rectified. We continue to use it to validate each build
StackHawk review
What do you like best about the product?
-Self Intuitive Interface
- Better Accuracy.
- CI/CD integration.
- Tool developed, Based on Industry-standard OWASP ZAP open-source scanner.
- Awesome support team
- Better Accuracy.
- CI/CD integration.
- Tool developed, Based on Industry-standard OWASP ZAP open-source scanner.
- Awesome support team
What do you dislike about the product?
- Description and details of some of the vulnerabilities are not categorized.
- Lack of configuration option in the portal,(most of the scan configs are done within a yaml file).
- overhead of managing a docker container. they are working well with some of the orchestration platform but not sure if it would be that great.
- Lack of configuration option in the portal,(most of the scan configs are done within a yaml file).
- overhead of managing a docker container. they are working well with some of the orchestration platform but not sure if it would be that great.
What problems is the product solving and how is that benefiting you?
- Having a DAST tool helps to find security vuln in web applications which usually is not picked up by the SAST tools.
- Improve the overall security posture of the organization.
- Having this as a part of CI/CD will help to fulfill the regulatory compliance requirements.
- Improve the overall security posture of the organization.
- Having this as a part of CI/CD will help to fulfill the regulatory compliance requirements.
Great Product with even better support.
What do you like best about the product?
StackHawk has a nice, clean, no-nonsense interface that gets to the point, and gets out of the way. It integrates nicely with our workflow and the customer support and success teams have been great to help us get our product to a better state.
What do you dislike about the product?
There is a bit of manual setup required that seems a little non-trivial, but given how modern applications are built I can't see a better way this could be done!
What problems is the product solving and how is that benefiting you?
StackHawk helps us catch security vulnerabilities in an automated fashion as soon as they appear.
showing 41 - 50