Yes, StackHawk can scan APIs. It supports OpenAPI specs, SOAP WSDL configurations, and GraphQL introspection endpoints to discover API routes and supported queries.