Case Study: a global customer experience platform achieves enterprise-scale API testing with StackHawk

Global CX Platform cuts manual pen testing by 40-50 hours per quarter with StackHawk

The customer, a global customer experience platform, faced significant challenges implementing automated dynamic application security testing (DAST) at an enterprise scale. Their massive API surface and complex infrastructure, which included strict request size limits and rate limiting, caused most security scanners to fail, blocking 60-90% of scan requests. With 400 code contributors, manual penetration testing was too slow and time-consuming to keep pace with their rapid development. They chose StackHawk to overcome these constraints.

StackHawk provided a highly configurable DAST solution that integrated into the customer's Jenkins CI/CD pipeline. By tuning concurrency, throttling requests, and splitting large API specs, StackHawk adapted to the infrastructure without requiring changes. The results included replacing 80-100 hours of quarterly manual penetration testing with weekly automated scans, freeing security engineers to expand coverage. This allowed the company to effectively secure its platform for over 10,000 enterprise customers.