brakeman - Brakeman Security Scanner for Ruby on Rails
Static analysis security vulnerability scanner for Ruby on Rails applications that detects SQL injection, XSS, command injection, and other vulnerability types.
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Scan Rails application for vulnerabilities
- Generate security reports in multiple formats
- Filter warnings by confidence level
- Run specific security checks
- Skip specific security checks
- Manage false positive warnings interactively
- Compare scan results with baseline
- Create Brakeman configuration files
- List available security checks
- Mark custom methods as safe
Inputs
- Ruby on Rails application source code
- Brakeman configuration file
- Baseline scan report (JSON)
- Ignore configuration file
Outputs
- Security vulnerability reports (HTML, JSON, text, etc.)
- Ignored warnings configuration file
- Brakeman configuration file
- Scan comparison results
Requirements
- Ruby 3.0.0 or higher installed
- Brakeman gem installed or Docker available
- Rails 2.3.x through 8.x application