Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
StackHawk is awesome!
What do you like best about the product?
StackHawk does a great job scanning my applications for security vulnerabilities. This helps me have a leaner staff because I don't need to hire a dedicated security specialist.
What do you dislike about the product?
I wish the scans for frontend apps were a bit more comprehensive.
What problems is the product solving and how is that benefiting you?
StackHawk helps me solve my security problems without having to hire additional staff who specialize in security.
- Leave a Comment |
- Mark review as helpful
Helps ensure we can sleep easy
What do you like best about the product?
Breadth and depth of scan
Also ease of setup, great support and an intuitive UI!
Also ease of setup, great support and an intuitive UI!
What do you dislike about the product?
None of note. As always, looking forward to new scans!
What problems is the product solving and how is that benefiting you?
StackHawk has flagged some important vulnerabilities in our app that we've now rectified. We continue to use it to validate each build
StackHawk review
What do you like best about the product?
-Self Intuitive Interface
- Better Accuracy.
- CI/CD integration.
- Tool developed, Based on Industry-standard OWASP ZAP open-source scanner.
- Awesome support team
- Better Accuracy.
- CI/CD integration.
- Tool developed, Based on Industry-standard OWASP ZAP open-source scanner.
- Awesome support team
What do you dislike about the product?
- Description and details of some of the vulnerabilities are not categorized.
- Lack of configuration option in the portal,(most of the scan configs are done within a yaml file).
- overhead of managing a docker container. they are working well with some of the orchestration platform but not sure if it would be that great.
- Lack of configuration option in the portal,(most of the scan configs are done within a yaml file).
- overhead of managing a docker container. they are working well with some of the orchestration platform but not sure if it would be that great.
What problems is the product solving and how is that benefiting you?
- Having a DAST tool helps to find security vuln in web applications which usually is not picked up by the SAST tools.
- Improve the overall security posture of the organization.
- Having this as a part of CI/CD will help to fulfill the regulatory compliance requirements.
- Improve the overall security posture of the organization.
- Having this as a part of CI/CD will help to fulfill the regulatory compliance requirements.
Great Product with even better support.
What do you like best about the product?
StackHawk has a nice, clean, no-nonsense interface that gets to the point, and gets out of the way. It integrates nicely with our workflow and the customer support and success teams have been great to help us get our product to a better state.
What do you dislike about the product?
There is a bit of manual setup required that seems a little non-trivial, but given how modern applications are built I can't see a better way this could be done!
What problems is the product solving and how is that benefiting you?
StackHawk helps us catch security vulnerabilities in an automated fashion as soon as they appear.
Awesome support
What do you like best about the product?
The support we had in getting StackHawk installed and working was great. They helped us out on any questions or issues we had and are always willing to get on a call to work through an issue.
What do you dislike about the product?
I can't think of anything I dislike. Any probomes are quickly resolved.
What problems is the product solving and how is that benefiting you?
Scaning a Web application looking for security vunrablities. We now have a more secure web application.
Scanning to stay compliant
What do you like best about the product?
The setup and scanning process is very straightforward and provides ongoing value to stay compliant with OWASP and the many other CVE's out there. It has already helped us improve security and we're able to learn while using it because of its documentation included in the reporting. On top of all this, it has also helped us with sales and procurement.
What do you dislike about the product?
False positives do occur when using Stackhawk but they're very limited.
What problems is the product solving and how is that benefiting you?
- Building secure applications and keeping them secure
- Enterprise sales are easier when you are a customer of Stackhawk
- Enterprise sales are easier when you are a customer of Stackhawk
Recommendations to others considering the product:
If you are using GraphQL in your tech stack then StackHawk should be a no-brainer.
DevSecOps tool for API and SPA’s dynamic scanning
What do you like best about the product?
Ease of deployment and speed to delivery. Tooling runs great for local dev as well in the CI. Uses GitOps approach for scanning definitions in CI. Ingesting Swagger/OpenAPI spec for surface scanning. Fast scanning and actionable results. ZAP on steroids with great tooling and developer experience.
What do you dislike about the product?
Would like to see smoketesting for CD to make sure basic security controls are in place for prod deploys.
What problems is the product solving and how is that benefiting you?
Shifting dynamic security scanning left in the development lifecycle so we can catch flaws earlier. Fuzzing / scanning public RESTful API surface.
Integrating StackHawk into our CI/CD Pipeline for best practice security well before production
What do you like best about the product?
Determining security holes and bugs within our chosen app stack is key to handling PII and PIFI data. The Stackhawk team is excellent; they follow up when our pipelines encounter issues via shared slack channel, usually before we even have a chance to follow up.
What do you dislike about the product?
We haven't found anything to dislike from StackHawk
What problems is the product solving and how is that benefiting you?
Security Best Practices, hardening our API and Application Code, testing against all known penetration points on each pull request.
Great solution that allows to customize scans with pretty good results.
What do you like best about the product?
That you can customize scans to make them fast and accurate.
What do you dislike about the product?
It based on OWASP Zap but you can't add your own plugins.
What problems is the product solving and how is that benefiting you?
API tests.
Easy and quick setup
What do you like best about the product?
In matters of minutes, one can set up and run a full scan against a web application. The intuitive and well-documented steps about how to integrate Stackhawk into the development lifecycle(build workflows, notifications) enabled us to get straight to what matters, which is the scan results.
Stackhawk's support was really helpful when needed.
Stackhawk's support was really helpful when needed.
What do you dislike about the product?
Some dashboard items could be improved, such as an option to export scan results to pdf and/or other formats; the scan page could be a bit less populated.
Also, a pay per scan plan would be well appreciated.
Also, a pay per scan plan would be well appreciated.
What problems is the product solving and how is that benefiting you?
We need to make sure that the applications we make available to our customers comply with the most common web application security standards.
Recommendations to others considering the product:
Stackhawk tool is easy to use, can be easily integrated into the development lifecycle, and can enable teams to have better visibility over possible security issues in their web applications.
showing 51 - 60