# StackHawk alternatives: what AI models name instead, October 2026

IT AI Recommendation Index, October 2026 Edition. 396 of the 504 answers in the 2 categories where StackHawk holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://it-ai-index.com/vendors/stackhawk/alternatives/

## Named instead, most often (every category and segment added)

- Invicti: 49
- OWASP ZAP: 40
- Salt Security: 32
- Akamai API Security: 25
- 42Crunch: 13
- Acunetix: 12

## Dynamic application security testing

**Small business**: 43 of 84 answers did not name StackHawk (StackHawk is #3 of 12 at 12%).

- OWASP ZAP: first choice in 18 of those 43
- Intruder: first choice in 7 of those 43
- Acunetix: first choice in 5 of those 43
- Invicti: first choice in 3 of those 43
- Invicti Web + API: first choice in 2 of those 43
- Astra Security: first choice in 1 of those 43
- Detectify: first choice in 1 of those 43
- Edgescan: first choice in 1 of those 43

**Mid-market**: 58 of 84 answers did not name StackHawk (StackHawk is #4 of 11 at 8%).

- OWASP ZAP: first choice in 13 of those 58
- Invicti: first choice in 9 of those 58
- Acunetix: first choice in 5 of those 58
- Bright Security: first choice in 3 of those 58
- Burp Suite Enterprise Edition: first choice in 3 of those 58
- Intruder: first choice in 3 of those 58
- Burp Suite: first choice in 2 of those 58
- Burp Suite DAST: first choice in 2 of those 58

**Enterprise**: 76 of 84 answers did not name StackHawk (StackHawk is #9 of 14 at 2%).

- Invicti: first choice in 37 of those 76
- Burp Suite DAST: first choice in 5 of those 76
- Veracode DAST: first choice in 4 of those 76
- Burp Suite Enterprise Edition: first choice in 3 of those 76
- Acunetix: first choice in 2 of those 76
- Burp Suite: first choice in 2 of those 76
- HCL AppScan: first choice in 2 of those 76
- Rapid7 InsightAppSec: first choice in 2 of those 76

## API security platforms

**Small business**: 62 of 84 answers did not name StackHawk (StackHawk is #2 of 14 at 11%).

- 42Crunch: first choice in 7 of those 62
- Zuplo: first choice in 6 of those 62
- Cloudflare API Shield: first choice in 5 of those 62
- OWASP ZAP: first choice in 5 of those 62
- Postman: first choice in 4 of those 62
- Wallarm API Security: first choice in 4 of those 62
- Cloudflare Application Security: first choice in 2 of those 62
- Intruder: first choice in 2 of those 62

**Mid-market**: 74 of 84 answers did not name StackHawk (StackHawk is #8 of 13 at 4%).

- Salt Security: first choice in 9 of those 74
- Aikido Security: first choice in 5 of those 74
- Akamai API Security: first choice in 5 of those 74
- Traceable AI: first choice in 5 of those 74
- 42Crunch: first choice in 4 of those 74
- OWASP ZAP: first choice in 4 of those 74
- Wallarm API Security: first choice in 4 of those 74
- Noname Security: first choice in 2 of those 74

**Enterprise**: 83 of 84 answers did not name StackHawk.

- Salt Security: first choice in 23 of those 83
- Akamai API Security: first choice in 20 of those 83
- Tyk: first choice in 3 of those 83
- 42Crunch: first choice in 2 of those 83
- Gravitee: first choice in 2 of those 83
- Wallarm API Security: first choice in 2 of those 83
- Apigee: first choice in 1 of those 83
- Cequence Unified API Protection: first choice in 1 of those 83

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.