4 Essential Security Tools To Level Up Your Rails Security

• Brakeman

  16 6,906 8.1 Ruby

  A static analysis security vulnerability scanner for Ruby on Rails applications

brakeman is another useful Ruby gem that is a static analysis security vulnerability scanner for Ruby on Rails applications.

• rack-cors

  6 3,245 5.6 JavaScript

  Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.

For this, you can use the rack-cors gem:

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• bundler-audit

  5 2,646 6.1 Ruby

  Patch-level verification for Bundler

  

This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.

• ruby-advisory-db

  2 989 9.1 Ruby

  A database of vulnerable Ruby Gems

  

This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.

• flow-pipeline

  171 163 1.7 Go

  A set of tools and examples to run a flow-pipeline (sFlow, NetFlow)

  

You can combine rack-attack and Cloudflare as a good way to prevent DDoS attacks. Just because you are using rack-attack, it doesn’t mean that you should not use a tool like Cloudflare.

• Ruby on Rails

  467 54,865 10.0 Ruby

  Ruby on Rails

  

At FastRuby.io we love Ruby on Rails because it is so powerful: You can quickly create an application that is feature complete, stable, and secure

• SecureHeaders

  2 3,129 4.2 Ruby

  Manages application of security headers with many safe defaults

  

The secure_headers gem will automatically apply several headers that are related to security. This includes:

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Rack::Attack

  13 5,482 7.1 Ruby

  Rack middleware for blocking & throttling

  

Rack::Attack

• awesome-ruby-security

  1 451 2.4

  Awesome Ruby Security resources

Awesome Ruby Security Resources

Suggest a related project