StackHawk makes it simple for developers to find, triage, and fix application security bugs. AppSec Closer to the Keyboard than Ever Before. 🦅 Kaakaww!
Denver, CO
Joined July 2019
- Tweets1.4K
- Following621
- Followers1.1K
- Likes927
One security engineer rolled out DAST to 40+ dev teams in two quarters.
The verdict: the problem was never technical. It was a project management problem.
Read the full story: lnkd.in/gXFapXtM
2
113
Bay Area AppSec, we'll be at the SF Secure Software and AppSec Summit on May 14 in Palo Alto.
Learn more: clutchevents.co/events/san-f…
76
StackHawk is now a @Wiz_io Integration Partner!
StackHawk’s pre-production DAST findings flow directly into the Wiz Security Graph, where they are correlated with the cloud infrastructure context Wiz maintains.
Application and cloud risk in one place.
stackhawk.com/blog/stackhawk…
Every DAST vendor supports OAuth2, Jira, and OWASP Top 10.
That's not an evaluation.
Download our new DAST RFP template with 75+ criteria, the ones that actually separate tools.
🔗 stackhawk.com/resources/dast…
1
63
OpenAI launched Codex Security in March. Real results. Previously unknown vulns in OpenSSH and Chromium. Most coverage stopped there.
1
44
Copilot's coding agent learned from public codebases — including the ones with SQL injection sitting in them, weak auth that nobody caught, secrets committed by accident. It doesn't apply a security lens. It applies the patterns it saw most often.
1
81
MCP servers connect to production: your DBs, internal APIs, real services. Most ship with zero security testing.
StackHawk now scans remote MCP servers. Add a config block, run HawkScan, findings map to specific tools, not raw protocol calls.
stackhawk.com/blog/introduci…
45
AI pen testing isn't replacing DAST.
It's replacing the $40k manual pentest you run twice a year.
Different cadence, different scope, different job.
Read the full breakdown of DAST vs. AI pentesting: stackhawk.com/blog/dast-vs-a…
1
63
StackHawk will be at @owasp SnowFROC '26 on April 16–17.
400 practitioners. Two days of talks and hands-on training.
If you're going and want to talk about how AppSec programs actually keep up with AI development velocity, come find us🦅
snowfroc.com
42
That's a wrap on RSAC 2026.
It was a packed week of dinners, workshops, and incredible conversations with the AppSec community.
Big thanks to our partners, customers, and friends for making it one to remember.
Check out Payton O'Neal’s full recap: stackhawk.com/blog/rsac-2026…
2
2
37
StackHawk is heading to @owasp BASC 2026 in Cambridge 🦅
April 11 at the Boston Marriott. We'll be there talking about how teams are running DAST and API security testing in CI/CD.
Come find us!
đź”—basconf.org
46
On the night before SnowFROC 🏔️
We're joining @semgrep, @SheHacksPurple, and OWASP for a panel on AI agents in AppSec.
Register here: semgrep.dev/events/agentical…
1
36
@StackHawk's Scott Gerlach and @semgrep's Kyle Northcutt got into a room at #RSAC2026 and talked about code velocity, vibe coders, AI budgets, and why sitting on the bench isn't an option anymore.
Watch the full video here: youtu.be/nbsOae30PWg
30
StackHawk CSO & Co-founder Scott Gerlach is joining @semgrep at RSAC for an interactive demo.
When: March 25, 10 AM PT in SF
Can't make it? Catch us at Semgrep's booth #1743 on March 24 at 11 AM PT for an in-person demo on the floor.
Register here: semgrep.dev/events/sast-dast…
40
The Women in Security Documentary is an award-winning film on the real stories behind women shaping the security industry.
The San Francisco premiere is a red carpet event at AMC Metreon 16 on March 24 and 25 at 4 PM PT.
Register here: docs.google.com/forms/d/e/1F…
45
JSON-RPC powers blockchain, IoT, MCP, and most DAST tools completely ignore it.
The attack surface hides in the method namespace, not the URL. StackHawk now fuzzes every method, every parameter. REST, GraphQL, gRPC, and now JSON-RPC.
We test it all.
stackhawk.com/blog/json-rpc-…
1
37
Joe Sullivan (former CSO at Uber, Facebook, and Cloudflare) is leading a fireside chat at RSAC.
StackHawk is co-hosting with @EndorLabs, Cyberhaven, and @brinqa .
Learn more and RSVP here: endorlabs.com/events/ciso-ba…
1
76
We’re excited to welcome Regional Sales Director Suzy McClure to the team!
Suzy has spent 15+ years in SaaS and cybersecurity sales, with deep channel experience at every stop.
Welcome to the flock, Suzy!
54
We're a proud sponsor of PBC Connect at RSAC 2026 with ArmorCode Inc.
The Purple Book Community is bringing together CISOs and security leaders for a full day of panels and networking at RSAC.
Register for free here: thepurplebook.club/pbc-conne…
29