# ankane/secure_rails

Rails security best practices

Repository: https://github.com/ankane/secure_rails
Canonical: https://ross.abutalabs.com/products/secure_rails
License: CC0-1.0
License Family: permissive
Last push: 2025-07-26T02:41:21+00:00

## Health v2 (maintenance only)
Score: 47/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 33, release rhythm 35, longevity 100
- inputs: {"age_days": 4094, "days_push": 403, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1066, forks 64 (observed 2026-08-28T04:03:27.044495+00:00)

## What it is
A curated guide of security best practices for Ruby on Rails applications, covering secrets management, SQL injection, host header injection, HTTPS, and encryption of data at rest. It is documentation rather than a library, pointing to relevant Rails features and companion tools.

## Use cases
- secure a rails app
- rails security best practices
- prevent sql injection in activerecord
- force https and hsts in rails
- encrypt sensitive data in rails
- rails secrets management guide

## When to choose
- you build or audit a Ruby on Rails application and want a concise security checklist
- you want curated links to Rails security features and related libraries

## When to avoid
- you need a runnable security scanning tool rather than documentation
- your stack is not Ruby on Rails

## Facets
- artifact type: learning-resource
- maturity: maintenance
- function: security, documentation
- domain: security, web-development, documentation
- platform: ruby
- tags: rails, best-practices, security-guide, ruby-on-rails, web-server

## Member repositories
- ankane/secure_rails (main) score 47

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:27.044495+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:55:14.199248+00:00, confidence not recorded.
  - readme: https://github.com/ankane/secure_rails (fetched 2026-08-28T04:03:27.044495+00:00, sha 6582e8ef0c67)
- Data as of 2026-08-30T08:39:29.467469+00:00.