Home

Brakeman is a static analysis tool for finding security vulnerabilities in Rails (<3.0) applications. Point it at the root directory of your Rails application code and it will generate a report listing any potential vulnerabilities it has found.

For more information on the vulnerabilities reported by brakeman, please see the list of Warning Types.

See Options for information on settings available when running brakeman.

Check Interpreting Reports for tips on understanding the reports generated by brakeman.