---
title: "Getting Started"
description: "Run your first security scan in minutes. Learn DAST basics, authenticated scanning, API discovery, and CI/CD integration with StackHawk."
url: https://docs.stackhawk.com/getting-started/
---

# Getting Started

Security testing for the way you build

StackHawk is dynamic application security testing (DAST) built for developers. Test your running applications to find real vulnerabilities before they reach production.

> **Tip:** Ready to scan? [Scan from your agent](https://docs.stackhawk.com/ai-security/) for the fastest path, or [install HawkScan](https://docs.stackhawk.com/getting-started/install-and-run/) to run locally or in CI/CD.

## Start Scanning

- [Scan from your agent](https://docs.stackhawk.com/ai-security/): Let your AI coding agent configure, scan, fix, and verify — no extra setup.
- [Install & Run HawkScan](https://docs.stackhawk.com/getting-started/install-and-run/): Install the CLI to scan locally or in your CI/CD pipeline.
- [Authenticated Scanning](https://docs.stackhawk.com/getting-started/authenticated-scan/): Test protected routes behind login screens.

## API Discovery

- [Discover APIs](https://docs.stackhawk.com/platform/api-discovery/): Find shadow APIs and undocumented routes across your codebase.
- [OAS Generation](https://docs.stackhawk.com/platform/api-discovery/oas-generation/): Auto-generate OpenAPI specs from your code repositories.
- [Sensitive Data](https://docs.stackhawk.com/platform/api-discovery/sensitive-data/): Identify APIs handling PII, PCI, and PHI for prioritized testing.

## AI-Powered Security

- [LLM Security Testing](https://docs.stackhawk.com/hawkscan/llm-security-testing/): Test for OWASP LLM Top 10: prompt injection, data disclosure, and more.
- [Agent Skills](https://docs.stackhawk.com/ai-security/agent-skills/): Install for Claude Code, Cursor, Codex, Copilot, or Antigravity. One command to get started.

## Advanced Testing

- [Business Logic Testing](https://docs.stackhawk.com/hawkscan/business-logic-testing/): Detect authorization flaws (BOLA/BFLA) with multi-user role testing.
- [Custom Test Scripts](https://docs.stackhawk.com/scripting/): Write custom security tests in JavaScript or Kotlin.

## Integrate & Automate

- [CI/CD Integration](https://docs.stackhawk.com/integrations/ci-cd/): GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, and more.
- [Workflow Integrations](https://docs.stackhawk.com/integrations/workflows/): Connect to Jira, Slack, Microsoft Teams, and other tools.
- [Triage Findings](https://docs.stackhawk.com/platform/scans/): Review and track remediation in the StackHawk Platform.
- [Cloud Deployment](https://docs.stackhawk.com/getting-started/quickstart/): Scan from StackHawk's cloud infrastructure — no CLI or Docker required.

## Quick Links

- [Downloads](https://docs.stackhawk.com/downloads/): Get HawkScan for macOS, Windows, or Linux.
- [Configuration Reference](https://docs.stackhawk.com/hawkscan/configuration/): Complete stackhawk.yml options.
- [FAQ](https://docs.stackhawk.com/getting-started/faq/): Common questions answered.