![\"Brakeman](\"https:\/\/farm4.staticflickr.com\/3954\/15718919032_a8fe85d3f4_o.png\")
<\/p>\nBrakeman is a Rails security scanner – unlike many web security scanners, Brakeman looks at the source code of your application. This means you do not need to set up your whole application stack to use it. Once Brakeman scans the application code, it produces a report of all security issues it has found.<\/p>\n
It works with Rails 2.x, 3.x, and 4.x.<\/p>\n
<\/p>\n
The only other Ruby-centric tool we’ve covered is:<\/p>\n
– Codesake::Dawn \u2013 Static Code Analysis Security Scanner For Ruby<\/a><\/p>\n If you are interested in more tools of this type you can find our complete list here (which covers various languages) – Code Auditing Tools<\/a>.<\/p>\n No Configuration Necessary<\/strong><\/p>\n Brakeman requires zero setup or configuration once it is installed. Just run it.<\/p>\n Run It Anytime<\/strong><\/p>\n Because all Brakeman needs is source code, Brakeman can be run at any stage of development: you can generate a new application with rails new and immediately check it with Brakeman.<\/p>\n Better Coverage<\/strong><\/p>\n Since Brakeman does not rely on spidering sites to determine all their pages, it can provide more complete coverage of an application. This includes pages which may not be \u2018live\u2019 yet. In theory, Brakeman can find security vulnerabilities before they become exploitable.<\/p>\nAdvantages<\/h2>\n