Secure Your Rails Applications

Brakeman is a free vulnerability scanner designed for Ruby on Rails applications. Statically analyze Rails application code to find security issues at any stage of development.

🚀 Get Started 📖 Read Documentation

terminal

# Install Brakeman
gem install brakeman
# Scan your Rails app
brakeman
== Brakeman Report ==
# ...

Why Use Brakeman?

Fast and easy security scans built by the community

🎯

Rails-Specific

Built specifically for Ruby on Rails. Understands Rails patterns, conventions, and common vulnerability patterns.

🔧

Zero Configuration

Works out of the box with sensible defaults.

🔍

Broad Coverage

Detects SQL injection, cross-site scripting, command injection, and dozens of other vulnerability types.

Latest News

Stay up to date with the latest releases and community contributions

Version 8.0.6

Brakeman 8.0.6

August 2026 • A few bug fixes

Rails 8.0 EOL Date

🎉 What's New

Fix EOL date for Rails 8.0 (yeaseul-kim)
Fix command injection false positives (Jacob Evelyn)
Add EOL dates for Rails 8.1 and Ruby 4.0
Fix unused variable warning (@viralpraxis)

Read Full Release Notes →

Secure Your Rails Applications

Why Use Brakeman?

Rails-Specific

Zero Configuration

Broad Coverage

Latest News

Brakeman 8.0.6

Rails 8.0 EOL Date

🎉 What's New

Brakeman 8.0.5

Brakeman 8.0.3

Brakeman 8.0.1

Brakeman 8.0.0