StackHawk’s Wingman fixes security flaws while the AI agent is still coding

StackHawk Inc. launched Wingman, a tool that fixes security vulnerabilities inside AI coding sessions by scanning an application when a coding agent marks a feature done and returning findings to the agent that wrote the code for patching and re-verification. StackHawk said Wingman fixed more than 7,000 vulnerabilities for early-access customers before launch, with 98% of those repairs holding, and it installs into agentic coding workflows including Claude Code, Cursor, GitHub Copilot, Codex and Antigravity. Wingman costs $10 per user per month with unlimited applications and 50 scans per user monthly, plus a 14-day free trial.

StackHawk’s Wingman fixes security flaws while the AI agent is still coding Application security company StackHawk Inc. https://www.stackhawk.com/ today launched Wingman, a tool that fixes security vulnerabilities inside the artificial intelligence coding session that produced the flawed code. The software installs into agentic coding workflows, among them Claude Code, Cursor and GitHub Copilot. Wingman fires when a coding agent marks a feature as done. The scanner configures itself, boots the running application and probes it the way an attacker would, without a manual setup step. Findings then go back to the agent that wrote the code, which patches the flaw, and a second scan checks the repair before a pull request opens. StackHawk’s argument is that an agent that built an application already holds its architecture, its dependencies and the conventions the rest of the team codes to. StackHawk said that context is what separates Wingman from a scanner bolted on downstream. Patches come back in the shape of the surrounding code. Codex and Antigravity are supported too. Wingman tells the continuous integration pipeline whether a commit is clean. Because every test carries the commit it ran against, security teams end up with a record of what shipped. StackHawk said Wingman fixed more than 7,000 vulnerabilities for early-access customers before the launch, and that 98% of those repairs have held. Attackers often reach a vulnerability before it is publicly disclosed, Chief Executive Joni Klippert said. AI coding agents have pushed engineering teams out ahead of what security can absorb. “Finding was never the hard part,” Klippert said. “Fixing and verifying a vulnerability fast enough to match how engineering teams ship today, at machine speed, inside the workflow, as the code is written, is what security teams have never had the staff or the hours to do.” Wingman costs $10 per user each month and includes unlimited applications with 50 scans per user a month. A 14-day free trial is available. Teams that need broader application programming interface discovery and attack-surface mapping can pair the tool with StackHawk Scale, the company’s enterprise tier. StackHawk sells to more than 200 enterprises. The company is venture capital-backed and raised $20.7 million in May 2022 https://siliconangle.com/2022/05/12/application-security-testing-startup-stackhawk-raises-20-7m/ in a round led by Sapphire Ventures and Costanoa Ventures. Klippert spoke with theCUBE, SiliconANGLE Media’s livestreaming studio, in March https://siliconangle.com/2026/03/31/runtime-testing-age-ai-coding-rsac26/ , when she discussed how developers should not have to become security specialists to ship safe code. “They want to write quality code, but they don’t want to become security engineers,” she said. Image: StackHawk A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network , where technology leaders connect, share intelligence and create opportunities. - 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more - 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/ https://siliconangle.com/aws-marketplace/ About SiliconANGLE Media SiliconANGLE https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552 , theCUBE Network https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da , theCUBE Research https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f , CUBE365 https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6 , theCUBE AI https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683 and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.