Brakeman Description

Brakeman is a security scanner for Ruby on Rails applications. Brakeman scans your application's source code, which is a different approach to other web security scanners. Brakeman does not require you to set up your entire application stack in order to use it. Brakeman scans your application code and generates a report detailing all security issues found. Once Brakeman is installed, it doesn't require any configuration or setup. Simply run it. Brakeman is a program that only requires source code. You can create a new application using rails new and then run Brakeman to check it. Brakeman doesn't rely on spidering sites for all pages. This allows it to provide a more comprehensive coverage of an application. This includes pages that may not yet be live. Brakeman can detect security flaws before they are exploitable. Brakeman was specifically designed for Ruby on Rails applications. It can check configuration settings for best practice.

Pricing

Free Version:
Yes

Integrations

API:
Yes, Brakeman has an API

Reviews

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Company Details

Company:
Brakeman
Year Founded:
2014
Website:
brakemanscanner.org

Media

Brakeman Screenshot 1
Recommended Products
Data-Driven Innovation: The CDP Playbook for Eng Teams Icon
Data-Driven Innovation: The CDP Playbook for Eng Teams

Why your engineering team needs a CDP

In this playbook, you’ll learn…
- How engineering teams use real-time customer data to achieve business goals.
- How to elevate your business to a new level of engineering efficiency with AI.
- Strategies used by engineering teams at Instacart, Staples Canada, Televisa Univision, CrossFit, and ClearScore to improve KPIs and drive efficiencies.

Product Details

Platforms
SaaS
Type of Training
Documentation
Customer Support
Online

Brakeman Features and Options

Static Code Analysis Software

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Static Application Security Testing (SAST) Software

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection