presidentbeef/brakeman

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

7262 stars · 776 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Brakeman is a free, open-source static analysis security scanner built specifically for Ruby on Rails applications. It analyzes Rails source code without running it to detect vulnerabilities like SQL injection, XSS, and command injection, producing reports in many formats.

Use cases

• scan a Rails app for security vulnerabilities
• find SQL injection in Ruby on Rails code
• detect XSS vulnerabilities in Rails controllers and views
• run security checks in CI for a Rails project
• audit Rails code without executing it
• generate SARIF or JSON security reports from Rails scans

When to choose

• you have a Ruby on Rails application (2.3 through 8.x) and want zero-configuration security scanning
• you need fast static analysis that runs locally or in CI without executing the app
• you want Rails-specific vulnerability checks that generic SAST tools miss

When to avoid

• your project is not a Rails application (use a general-purpose SAST tool instead)
• you need dynamic or runtime security testing rather than static analysis
• you need to scan non-Ruby code

Facets

cli-tool · maturity stable

security vulnerability-scanning static-site-generator developer-tools cli security web-development developer-tools backend ruby cli cross-platform static-analysis sast ruby-on-rails security-audit code-scanning docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="presidentbeef/brakeman")