StackHawk Is Now in Anthropic's Official Claude Code Plugin Marketplace

StackHawk’s HawkScan plugin for Claude Code automates application security testing after an AI agent completes a feature, fix, or refactor by configuring scans, testing the running application, addressing detected vulnerabilities, and rescanning to validate fixes. Available alongside a read-only StackHawk API plugin in Anthropic’s official Claude Code plugin directory, it analyzes repository documentation to create tailored StackHawk configurations for web, REST, GraphQL, gRPC, and SOAP applications, including technology-specific policies and authentication support for tokens, form logins, cookies, OAuth2, and custom flows. When authentication is unclear, it can analyze a browser login and use seed data tools if needed. The plugin prioritizes findings, can account for accepted risks or likely noise, and includes safeguards such as limiting scans and remediation cycles while providing progress updates and allowing users to stop it. Git hooks, commit and branch tagging, and StackHawk Attack Surface Management integration improve traceability, while the API plugin enables security-posture reporting, scan comparisons, filtering, and triage visibility without allowing changes to triage decisions. Use requires a StackHawk account, API key, and Hawk CLI or Docker version 6.0 or later.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.