Brakeman Reviews

Since brakeman is provided as a gem, it integrates easily with any ruby on rails app or gem. It runs effortlessly on terminal and provides an easy to read vulnerability report. Brakeman can also be plugged into a jenkins job while building a rails app so that vulnerability reports can be generated while building or deploying an app to sandbox or production environments. linter rules can be set to cause a jenkins build to fail on vulnerabilities issues. There are not many vulnerability scanning options so

The report generation is very basic. Could use some better formatting or links to vulnerabilities.

We could not find any better option for vulnerability scanning for rails applications. While developing we run brakeman manually in the terminal to verify that any code changes did not introduce any new vulnerabilities. Also integration with jenkins allows us to scan the rails application before the code reaches production.