StackHawk Wingman Gives Coding Agents a Security Partner
Security testing for coding agents is where AppSec must go when AI writes most of the code. Scott Gerlach, co-founder and CSO of StackHawk, joins Alan Shimel on Techstrong TV. Furthermore, he explains why fixing, not finding, is now the real constraint.
About Scott Gerlach
Scott ran security teams at GoDaddy for about 10 years. In addition, he was CSO at SendGrid right before Twilio bought the company. Consequently, he and CEO Joni Klippert launched StackHawk to put application security inside development.
Why fixing matters more than finding
Frontier models have made finding vulnerabilities cheap for defenders and attackers alike. Meanwhile, AI generated code has blown past tickets waiting at the end of a queue. Therefore, remediation must become a core part of every step of software delivery.
Scott notes that open weight models give threat actors the same power with fewer safeguards. Furthermore, human reviewers cannot keep up with thousands of lines of generated code. As a result, security testing for coding agents has to run at AI scale.
Inside StackHawk Wingman
Wingman adds a deterministic security partner to your coding agent. In addition, it works like linters and unit tests, acting as a gate before code moves forward. Consequently, vulnerabilities go straight back into the agent loop to be fixed.
It ships as a single binary plus agent skills that teach any plugin capable agent to use StackHawk. Meanwhile, it runs in the IDE, on the command line or inside a software factory. Therefore, security testing for coding agents fits every stage of agentic maturity.
Results and availability
Since a June soft launch, Wingman has fixed more than 10,000 vulnerabilities. Furthermore, it is generally available with a 14 day free trial and then 10 dollars per user per month.
Explore more DevSecOps coverage and the latest Techstrong TV interviews.
For more information please visit stackhawk.com
