Amazon Q Developer security scanning vs StackHawk Wingman
Quick answer
Amazon Q Developer security scanning (Amazon Web Services) and StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) are both listed in the Code security category of Agent Index.
They share no framework tags in our dataset.
This is not a ranking.
Amazon Q Developer security scanning (Amazon Web Services) and StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) are both listed in the Code security category of Agent Index. They share no framework tags in our dataset.
| Field | ||
|---|---|---|
| Vendor | Amazon Web Services | StackHawk (StackHawk, Inc.) |
| HQ | United States · North America | United States · North America |
| Primary category | Code security | Code security |
| Also listed in | Code security, Security | Code security, Security |
| Summary | Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month. |
| Frameworks (vendor-stated) | — | — |
| Frameworks (vendor-claimed) | — | — |
| Capabilities / tasks | appsec, sast, secrets detection, sca, iac, remediation | appsec, remediation, vulnerability management, agent platform with security integrations |
| Pricing (as published) | Free Tier with monthly limits; Amazon Q Developer Pro is $19 per user/month on aws.amazon.com/q/developer/pricing. Security scanning is a capability of those tiers, not a separately priced SKU on that page. | Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales. |
| Pricing model | freemium | published-tiers |
| Primary source | https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/code-reviews.html | https://www.stackhawk.com/product/wingman/ |
| Last checked | 2026-10-18 | 2026-10-18 |
| Official site | https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/code-reviews.html | https://www.stackhawk.com/product/wingman/ |
FAQ (from this dataset)
What is the difference between Amazon Q Developer security scanning and StackHawk Wingman?
Both are listed under Code security. Shared tasks: appsec, remediation. Amazon Q Developer security scanning-only tasks: sast, secrets-detection, sca, iac. StackHawk Wingman-only tasks: vulnerability-management, agent-platform-security-integrations. Differences are from stored category and task tags, not a ranking.
Which one publishes pricing?
Amazon Q Developer security scanning: Free Tier with monthly limits; Amazon Q Developer Pro is $19 per user/month on aws.amazon.com/q/developer/pricing. Security scanning is a capability of those tiers, not a separately priced SKU on that page. StackHawk Wingman (find-fix-verify security for AI coding agents): Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales.
Where are Amazon Q Developer security scanning and StackHawk Wingman headquartered?
Amazon Q Developer security scanning publishes HQ in United States. StackHawk Wingman (find-fix-verify security for AI coding agents) publishes HQ in United States.
Listings tagged agent platform with security integrations are coding platforms with a documented scanner or vulnerability-fix workflow, not dedicated application-security products. Dedicated AppSec listings are compared on the AI code security agents table.
Use-case comparisons
- AI code security agents — 33 listings (Application security scanning, suggested or automated code fixes, and pull-request security review)
Related
- Amazon Q Developer security scanning alternatives
- StackHawk Wingman (find-fix-verify security for AI coding agents) alternatives
- Best code security AI agents
More Amazon Q Developer security scanning comparisons
- Aikido AI AutoFix vs Amazon Q Developer security scanning
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs Amazon Q Developer security scanning
- Amazon Q Developer security scanning vs Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests)
- Amazon Q Developer security scanning vs Black Duck Signal (agentic AI AppSec)
- Amazon Q Developer security scanning vs Checkmarx One Assist
More StackHawk Wingman (find-fix-verify security for AI coding agents) comparisons
- Aikido AI AutoFix vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Black Duck Signal (agentic AI AppSec) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Checkmarx One Assist vs StackHawk Wingman (find-fix-verify security for AI coding agents)