Brakeman

Brakeman is a static analysis security scanner for Ruby on Rails applications. It analyses the application source code, without running it, to detect vulnerabilities such as SQL injection, cross-site scripting, command injection and dozens of other vulnerability types.

Brakeman is free to use and runs from the command line, for example in continuous integration. Version 8.1.0 was released in September 2026.