Audience

Development teams interested in a security scanner for Ruby on Rails applications

About Brakeman

Brakeman is a security scanner for Ruby on Rails applications. Unlike many web security scanners, Brakeman looks at the source code of your application. This means you do not need to set up your whole application stack to use it. Once Brakeman scans the application code, it produces a report of all security issues it has found. Brakeman requires zero setup or configuration once it is installed. Just run it. Because all Brakeman needs is source code, Brakeman can be run at any stage of development: you can generate a new application with rails new and immediately check it with Brakeman. Since Brakeman does not rely on spidering sites to determine all their pages, it can provide more complete coverage of an application. This includes pages which may not be ‘live’ yet. In theory, Brakeman can find security vulnerabilities before they become exploitable. Brakeman is specifically built for Ruby on Rails applications, so it can easily check configuration settings for best practices.

Pricing

Free Version:
Free Version available.

Integrations

API:
Yes, Brakeman offers API access

Ratings/Reviews

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Company Information

Brakeman
Founded: 2014
brakemanscanner.org

Videos and Screen Captures

Brakeman Screenshot 1
Other Useful Business Software
Build Data Resilience - Take the Assessment Today Icon
Build Data Resilience - Take the Assessment Today

Can you recover when it matters most? Take this quick assessment to identify gaps and build greater recovery confidence.

Is your recovery strategy as strong as you think? Take this quick self-assessment to check your recovery readiness and gain tailored insights. In only 2 minutes, you'll learn where you fall on the recovery readiness scale.
Take the Assessment

Product Details

Platforms Supported
Cloud
Training
Documentation
Support
Online

Brakeman Frequently Asked Questions

Q: What kinds of users and organization types does Brakeman work with?
Q: What languages does Brakeman support in their product?
Q: What kind of support options does Brakeman offer?
Q: What other applications or services does Brakeman integrate with?
Q: Does Brakeman have an API?
Q: What type of training does Brakeman provide?

Brakeman Product Features

Static Application Security Testing (SAST)

Application Security Not Supported
Dashboard Not Supported
Debugging Not Supported
Deployment Management Not Supported
IDE Not Supported
Multi-Language Scanning Not Supported
Real-Time Analytics Not Supported
Source Code Scanning Not Supported
Vulnerability Scanning Not Supported

Static Code Analysis

Multiple Programming Language Support Not Supported
Standard Security/Industry Libraries Not Supported
Code Standardization / Validation Not Supported
Analytics / Reporting Not Supported
Provides Recommendations Not Supported
Vulnerability Management Not Supported

Vulnerability Scanners

Network Mapping Not Supported
Web Inspection Not Supported
Defect Tracking Not Supported
Interactive Scanning Not Supported
Perimeter Scanning Not Supported
Black Box Scanning Not Supported
Continuous Monitoring Not Supported
Compliance Monitoring Not Supported
Asset Discovery Not Supported
Logging and Reporting Not Supported
Threat Intelligence Not Supported
Risk Analysis Not Supported