Brakeman is a free vulnerability scanner designed for Ruby on Rails applications. Statically analyze Rails application code to find security issues at any stage of development.
Fast and easy security scans built by the community
Built specifically for Ruby on Rails. Understands Rails patterns, conventions, and common vulnerability patterns.
Works out of the box with sensible defaults.
Detects SQL injection, cross-site scripting, command injection, and dozens of other vulnerability types.
Stay up to date with the latest releases and community contributions
--ensure-latest (#1989)
polymorphic_name SQLi false positive (Fredrico Franco)