StackHawk Storage Domains
StackHawk Storage Domains are custom domains in front of the platform’s object storage. When enabled, all object reads and writes for your organization route through these domains.
StackHawk Storage Domains are available on request. Contact StackHawk Support to have these domains enabled for your organization.
Domains
| Domain | Notes |
|---|---|
scan-results.prod.stackhawk.com | HTTPS (port 443), CloudFront-fronted |
hosted-assets.prod.stackhawk.com | HTTPS (port 443), CloudFront-fronted |
Both domains are required for the StackHawk Platform and CLIs to function. They split storage at the infrastructure layer and are interchangeable from a consumer perspective — there is no client-side decision to make about which one to use.
How It Works
Objects served from these domains are private by default. When the platform UI or a CLI needs to read or write an object, the StackHawk API issues a short-lived, presigned URL on one of these domains. Every request is signed; there is no anonymous access.
No client-side configuration is required. The platform returns the correct URL at request time; the UI and CLIs follow it transparently.
Network Allowlisting
If your organization restricts outbound traffic, allow HTTPS (port 443) egress to:
scan-results.prod.stackhawk.comhosted-assets.prod.stackhawk.com
These domains carry object-level traffic only. Regular StackHawk API calls continue to use api.stackhawk.com and the other StackHawk hostnames your environment already permits.