StackHawk

StackHawk's Wingman fixes security flaws while the AI agent is still coding - SiliconANGLE

StackHawk, the application security company, today announced the public launch of Wingman, a product that gives software engineers the ability to autonomously fix security vulnerabilities in the same AI coding session in which the code was written. Wingma

/PRNewswire/ -- StackHawk, the application security company, today announced the public launch of Wingman, a product that gives software engineers the ability...

Wingman is broadly available today. Here is why we built it, and why the clock is louder than most security programs are acting like it is. We started StackHawk in 2019 to help engineers fix vulnerabilities. Not find them. Fix them. Finding was already a

That gap is what API security testing tools fill. They point at a running API, work out which endpoints exist, and send the requests a normal client never would. Malformed payloads, tampered tokens, another user's object IDs, a thousand requests where one

A user changes the id in a URL from 1024 to 1025 and receives an invoice their account was never authorized to see. A standard user sends a POST request to the admin-only /admin/users endpoint and receives a 201 response. Neither request exploits a clever

Using a JWT scoped to your current user, you make a GET request to /api/orders/1024. Then, as a quick test, you ask for an order your account has no business seeing and definitely shouldn't have access to. If the API hands it over, you've demonstrated Bro

In 2018, the average gap between a CVE going public and the first confirmed exploitation of it in the wild was 2.3 years. Two years and change. You could see a CVE, log it, groom it, argue about severity, wait for the next maintenance window, get pulled o

Cursor generates code that ignores your project's conventions, puts files in the wrong directory, or reintroduces a pattern your team dropped six months ago. Not because the model is bad, but because it starts every session knowing nothing about how your

Every engineering org using AI coding agents is climbing the same ladder. Most don't know they're on it. And at almost every rung, they measure the wrong thing. We know because we watched it happen. Not just on our own teams, but on customer teams running