stackhawk-hawkscan Claude Code Plugin
Claude Code PluginClaude CodeSecuritySecurity, Auth & ComplianceCode Quality, Review & TestingClaude Code Customization & WorkflowThe explanation below is AI-generated. Please verify it against the sources.
This plugin lets Claude Code drive the StackHawk HawkScan dynamic application security testing tool as part of a coding session. It can produce or adjust a stackhawk.yml configuration file based on the project's technology stack and login method, trigger scans through the hawk command-line tool or a Docker container, and check the configuration before consuming a full scan. After a scan completes, it reads the resulting findings and turns them into ordered remediation tasks, then can re-run the scan afterward to confirm that issues were resolved. According to the homepage, using the AI-driven scanning features requires an active paid StackHawk subscription tier.
About the service
StackHawk is a cloud-based dynamic application and API security testing service. Users need a StackHawk account and an API key from that service, and scans are executed against a live application using either the hawk CLI or a Docker image tied to the account, with results and policies managed on the StackHawk platform.
What you can do with stackhawk-hawkscan
- Have Claude create or tune a stackhawk.yml file matching your application's framework and authentication approach
- Kick off a HawkScan run through the hawk CLI or a Docker container
- Get the scan configuration checked before a full run is executed
- Have security findings from a scan turned into ranked, actionable fix tasks
- Ask Claude to re-scan after fixes to verify that vulnerabilities were resolved
- Get help troubleshooting authentication problems in a scan setup
- Use it for apps built on REST/OpenAPI, GraphQL, gRPC, SOAP, or standard web architectures, across various login mechanisms
Sources
History of stackhawk-hawkscan
- Claude Code Plugin Added stackhawk-hawkscan