---
title: "Add an Application"
description: "Add a new application to StackHawk, configure it with the StackHawk Agent (FlightPath) or Guided Fields, and run your first scan locally, in CI/CD, or from the cloud."
url: https://docs.stackhawk.com/getting-started/add-application/
---

# Add an Application

Every scan in StackHawk runs against an **application record**, a lightweight object that holds your app’s identity, environment, and configuration. This guide walks through adding an application, configuring it, and running your first scan.

> **Tip:** Already have an application?\
> See [Applications](https://docs.stackhawk.com/platform/applications/) to manage existing apps, or jump to [Install & Run HawkScan](https://docs.stackhawk.com/getting-started/install-and-run/) to run a scan against one you've already created.

## Step 1: Enter Application Details

1. Log into the [StackHawk Platform](https://app.stackhawk.com/applications).

2. Click **Add an App** to open the **Create an Application** panel.

3. Enter your application details:

   - **Application Name** — a recognizable name (e.g., repo name, service name).
   - **Host** — the base URL where your app runs. Pick `https://` or `http://` from the protocol dropdown and enter the host (e.g., `test.your-api.com`).
   - **Environment** — `Development`, `Staging`, `Production`, or `Custom` (with a custom environment name).

4. Click **Next** to move on to configuration.

![StackHawk Platform - Create an Application, Application Details](https://docs.stackhawk.com/images/getting-started/add-application/application-details.png)

## Step 2: Configure Your Scan

Next, choose how you want to configure your scan. Pick the path that fits your workflow. You can always change it later.

- **Configure with StackHawk Agent**: Log in to your app in a secure browser session. We'll create your app and build your scan configuration for you. Your app must be publicly reachable from the internet.
- **Configure with Guided Fields**: Set up your scan using guided fields. Best for when you already know your app's endpoints and auth details.

### Configure with StackHawk Agent

The StackHawk Agent launches a secure browser session against your running app and generates a tailored scan configuration from your real traffic, including routes, parameters, and auth flows. This is powered by **FlightPath**, and it’s the fastest way to get high-fidelity coverage without hand-writing any YAML.

A few things to know:

- Your app must be **publicly reachable from the internet** for the Agent to connect.
- FlightPath is available on paid plans. Free-trial accounts will see an **Upgrade** prompt on this option.

See [FlightPath documentation](https://docs.stackhawk.com/platform/flightpath/) for setup instructions.

### Configure with Guided Fields

The guided Config Form lets you set up your scan directly in the StackHawk platform through a step-by-step form. Best for when you already know your app’s endpoints and auth details, or when your app isn’t publicly reachable. Common options include:

- **Authentication** — configure login so the scanner can test protected routes
- **API Specifications** — upload OpenAPI, GraphQL, or SOAP specs to expand coverage
- **Environment Variables** — pass secrets and runtime values to the scanner
- **Scan Policy** — select which plugins and tests run

Changes save directly to your application record and apply to every scan unless overridden locally in a `stackhawk.yml` file.

> **Note:** Prefer YAML? Inside the Config Form, open the **YAML editor** to edit the underlying `stackhawk.yml` directly. See [HawkScan Configuration](https://docs.stackhawk.com/hawkscan/configuration/) for the full reference.

## Step 3: Run a Scan

With your application created and configured, you’re ready to scan. StackHawk supports three scan targets. Pick whichever fits where your app runs.

- **Local Scan**: Run HawkScan from your machine against a locally-running app. Best for development and quick iteration. [Scan locally](https://docs.stackhawk.com/hawkscan/running-hawkscan/)
- **CI/CD**: Run HawkScan in your pipeline on every PR or merge. Best for automated, continuous coverage. [Set up CI/CD](https://docs.stackhawk.com/integrations/ci-cd/)
- **Hosted Scanner**: Run scans from StackHawk's infrastructure, with no local install or CI/CD wiring. Best for production and staged environments reachable from the internet. [Use Hosted Scanner](https://docs.stackhawk.com/platform/hosted-scanner/)

### Quick Local Scan

If you want to try a local scan right now, install HawkScan and run the following from your project root with a `stackhawk.yml` file containing your `applicationId`:

```bash
$ hawk scan
```

See [Install & Run HawkScan](https://docs.stackhawk.com/getting-started/install-and-run/) for full setup.

## What’s Next

- [Optimize your scans](https://docs.stackhawk.com/getting-started/scan-optimization/) with API specs and seed paths
- [Set up authenticated scanning](https://docs.stackhawk.com/getting-started/authenticated-scan/) to test protected routes
- [Manage your applications](https://docs.stackhawk.com/platform/applications/) in the platform