What is Brakeman?

Brakeman is a dedicated security scanner tailored for Ruby on Rails applications. Unlike numerous other web security scanning tools that often depend on runtime analysis, Brakeman directly examines the source code, which removes the necessity of setting up the entire application environment for its use. Upon completion of the scan, Brakeman produces a detailed report highlighting any identified security vulnerabilities. There is no need for additional setup or configuration after installation; users simply run the tool. Given that it only requires access to the source code, Brakeman can be employed at any stage of the development cycle, allowing developers to create a new application using the command rails new and instantly evaluate it for security issues. Additionally, because Brakeman bypasses the need to crawl websites for discovering all their pages, it provides more extensive coverage by detecting potential problems even in inactive pages. Essentially, Brakeman is equipped to identify security flaws before they can be exploited by malicious actors. Specifically designed for Ruby on Rails applications, Brakeman effectively checks configuration settings against recognized best practices, which helps to ensure a strong security posture. This focused methodology renders Brakeman an indispensable asset for developers who prioritize the security and integrity of their projects. Its ability to assess applications early in the development process further enhances its value, allowing for proactive measures to be taken before deployment.

Pricing

Free Version:
Free Version available.

Integrations

Offers API?:
Yes, Brakeman provides an API

Screenshots and Video

Brakeman Screenshot 1

Company Facts

Company Name:
Brakeman
Date Founded:
2014
Company Website:
brakemanscanner.org

Product Details

Deployment
SaaS
Training Options
Documentation Hub
Support
Web-Based Support

Product Details

Target Company Sizes
Individual
1-10
11-50
51-200
201-500
501-1000
1001-5000
5001-10000
10001+
Target Organization Types
Mid Size Business
Small Business
Enterprise
Freelance
Nonprofit
Government
Startup
Supported Languages
English

Brakeman Categories and Features

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Static Code Analysis Software

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Static Application Security Testing (SAST) Software

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning