slug: stackhawk
provider: StackHawk
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 6
edges:
- tag: Scan Results
  spec_file: stackhawk-scan-results-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.85
  evidence: GET /api/v1/app/{appId}/env/{envId}/scan/{scanId}/finding listFindings 'List Findings'; schemas
    Finding, Scan — 'Dynamic Application Security Testing (DAST)' scan results and findings
  reason: Operations expose security scan runs and the vulnerability findings they produce, which is vulnerability
    scanning/remediation tracking rather than generic QA or monitoring.
- tag: Perch
  spec_file: stackhawk-perch-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.8
  evidence: POST /api/v1/perch/scan  requestPerchScan  Request Scan Via Perch
  reason: Operations initiate and track security scans on the vendor's application/API security testing
    platform, which is vulnerability scanning.
- tag: Profile Scans
  spec_file: stackhawk-profile-scans-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.75
  evidence: POST /api/v1/app/{appId}/env/{envId}/profile  requestProfileAnalysis  Request Profile Analysis
  reason: Requesting analysis and retrieving ProfileScanResult for an application environment is security
    scanning of an application, i.e. vulnerability identification.
- tag: Scan Configuration
  spec_file: stackhawk-scan-configuration-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.75
  evidence: POST /api/v1/app/{appId}/scan-config  updateScanConfiguration  Update Scan Configuration
  reason: Defines how security scans are configured and run per application/organisation — configuration
    of vulnerability scanning activity.
- tag: Reports
  spec_file: stackhawk-reports-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.7
  evidence: GET /api/v1/app/{appId}/env/{envId}/scan/{scanId}/report  getScanReport  Get Scan Report
  reason: Generation and retrieval of security scan reports (ScanReport) for an application environment
    — reporting within vulnerability management. Slight ambiguity versus security governance reporting.
- tag: Scan Policies
  spec_file: stackhawk-scan-policies-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.7
  evidence: POST /api/v1/org/{orgId}/policy  createScanPolicy  Create Scan Policy
  reason: ScanPolicy objects govern which security tests/rules a DAST scan applies, so this is scanning
    rule management within vulnerability management rather than enterprise policy management.