StackHawk Wingman vs Takumi byGMO security AI agent
Quick answer
StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) and Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) (GMO Flatt Security (GMO Flatt Security株式会社)) are both listed in the Code security category of Agent Index.
They share no framework tags in our dataset.
This is not a ranking.
StackHawk Wingman (find-fix-verify security for AI coding agents) (StackHawk (StackHawk, Inc.)) and Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) (GMO Flatt Security (GMO Flatt Security株式会社)) are both listed in the Code security category of Agent Index. They share no framework tags in our dataset.
| Field |  StackHawk Wingman (find-fix-verify security for AI coding agents) |  Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) |
|---|---|---|
| Vendor | StackHawk (StackHawk, Inc.) | GMO Flatt Security (GMO Flatt Security株式会社) |
| HQ | United States · North America | Japan · Asia Pacific |
| Primary category | Code security | Code security |
| Also listed in | Code security, Security | Code security, Security |
| Summary | Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month. | Japanese security AI agent that continuously finds vulnerabilities with AI-SAST and AI-DAST (including logic, authentication and authorisation flaws), generates fix patches and opens pull requests with unit tests, and runs AI penetration tests that actually attempt intrusion to prove exploitability. |
| Frameworks (vendor-stated) | — | — |
| Frameworks (vendor-claimed) | — | ISO 27001 (ISMS certification, vendor claim) |
| Capabilities / tasks | appsec, remediation, vulnerability management, agent platform with security integrations | appsec, sast, remediation, pr review, pen test management, vulnerability management |
| Pricing (as published) | Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales. | Published on flatt.tech/takumi: base fee JPY 70,000/month (excl. tax) including 250 credits shared across diagnosis, auto-fix and AI pentest, 15 Takumi Guard users and Runner minutes; overage JPY 280 per credit; a 30-day AI penetration test offer at JPY 980,000 (excl. tax, through end of 2026). |
| Pricing model | published-tiers | published-tiers |
| Primary source | https://www.stackhawk.com/product/wingman/ | https://flatt.tech/takumi |
| Last checked | 2026-10-18 | 2026-10-20 |
| Official site | https://www.stackhawk.com/product/wingman/ | https://flatt.tech/takumi |
FAQ (from this dataset)
What is the difference between StackHawk Wingman and Takumi byGMO security AI agent?
Both are listed under Code security. Shared tasks: appsec, remediation, vulnerability-management. StackHawk Wingman-only tasks: agent-platform-security-integrations. Takumi byGMO security AI agent-only tasks: sast, pr-review, pen-test-management. Differences are from stored category and task tags, not a ranking.
Which one publishes pricing?
StackHawk Wingman (find-fix-verify security for AI coding agents): Wingman: US$10 per user per month, unlimited apps, 14-day free trial (no card). Scale plan: contact sales. Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing): Published on flatt.tech/takumi: base fee JPY 70,000/month (excl. tax) including 250 credits shared across diagnosis, auto-fix and AI pentest, 15 Takumi Guard users and Runner minutes; overage JPY 280 per credit; a 30-day AI penetration test offer at JPY 980,000 (excl. tax, through end of 2026).
Where are StackHawk Wingman and Takumi byGMO security AI agent headquartered?
StackHawk Wingman (find-fix-verify security for AI coding agents) publishes HQ in United States. Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) publishes HQ in Japan.
Listings tagged agent platform with security integrations are coding platforms with a documented scanner or vulnerability-fix workflow, not dedicated application-security products. Dedicated AppSec listings are compared on the AI code security agents table.
Use-case comparisons
- AI code security agents — 33 listings (Application security scanning, suggested or automated code fixes, and pull-request security review)
- Agentic pentesting AI agents — 33 listings (Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification)
Related
- StackHawk Wingman (find-fix-verify security for AI coding agents) alternatives
- Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) alternatives
- Best code security AI agents
More StackHawk Wingman (find-fix-verify security for AI coding agents) comparisons
- Aikido AI AutoFix vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Amazon Q Developer security scanning vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
- Black Duck Signal (agentic AI AppSec) vs StackHawk Wingman (find-fix-verify security for AI coding agents)
More Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) comparisons
- Aikido AI AutoFix vs Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)
- AISLE (autonomous vulnerability discovery, triage and verified-fix agents) vs Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)
- Amazon Q Developer security scanning vs Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)
- Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) vs Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)
- Black Duck Signal (agentic AI AppSec) vs Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)