APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product. Learn more →
Brakeman Alternatives
Similar projects and alternatives to Brakeman
-
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
-
-
-
-
-
bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
-
SimpleCov
Code coverage for Ruby with a powerful configuration library and automatic merging of coverage across test suites
-
-
-
-
Rubocop
Discontinued A Ruby static code analyzer and formatter, based on the community Ruby style guide. [Moved to: https://github.com/rubocop/rubocop] (by rubocop-hq)
-
-
-
-
FriendlyId
FriendlyId is the “Swiss Army bulldozer” of slugging and permalink plugins for ActiveRecord. It allows you to create pretty URL’s and work with human-friendly strings as if they were numeric ids for ActiveRecord models.
-
Flay
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better Brakeman alternative or higher similarity.
Brakeman discussion
Brakeman reviews and mentions
Posts with mentions or reviews of Brakeman.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2026-08-22.
-
Tooling every AI software harness should have
I use: https://brakemanscanner.org/, https://github.com/gitleaks/gitleaks, https://github.com/zizmorcore/zizmor/
-
How to integrate Brakeman Security Scanner with GitHub Code Scanning
The Rails security scanner Brakeman supports the SARIF format, but I couldn't find any documentation about how to join all the pieces together and see Brakeman results in GitHub Code Scanning. This blog post is my answer to the question of how you do it.
-
Tiny JITs for a Faster FFI
If you're looking for static typing a dynamic language is going to be a poor fit. I find a place for both. I love Rust, but trying to write a tool that consumed a GraphQL API with was a brutal exercise in frustation. I'd say that goes for typing of JSON or YAML or whatever structured format in general. It's refreshing being able to just work with data in the form I already know it's in. Ruby can be an incredibly productive language to work with.
If you're looking for static analysis in general, please note that there are mature tools available. Rubocop¹ is probably the most popular and allows for linting and code formatting. Brakeman² is a vulnerability scanner for Rails. Sorbet³ is a static type checker.
The tooling is there if you want to try things out. But, if you want a statically typed language then that's a debate that's been going since the dawn of programming language design. I doubt it's going to get resolved in this thread.
¹ - https://github.com/rubocop/rubocop
² - https://brakemanscanner.org/
³ - https://sorbet.org/
-
What are some common strategies for preventing SQL injection vulnerabilities in Rails beyond ActiveRecord?
Regularly audit your application's codebase to identify potential vulnerabilities. Tools such as Brakeman provide automated security scanning for Rails applications and can help identify injection vulnerabilities early.
-
Open Source Tool List for Web App Security
Brakeman https://github.com/presidentbeef/brakeman Description: A static analysis security vulnerability scanner specifically designed for Ruby on Rails applications. Usage: Use Brakeman to scan your Rails codebase and identify potential security issues during development.
-
First commits in a Ruby on Rails app
Brakeman - “Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis”
-
[Tool] An alternative to Brakeman for Security
My team and I released Bearer a couple of weeks ago, a newer open and free alternative to Brakeman to check your code for security and privacy risks. In addition to Ruby/Rails, we also cover your JS/TS code, which allows you to use a single solution for your whole Rails application.
-
Brakeman VS bearer - a user suggested alternative
2 projects | 10 Jul 2023
-
Code Reviewing a Ruby on Rails application.
Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications. It finds potential security issues in Rails applications by examining the Ruby code. Brakeman helps find and fix security holes before deploying your Rails app.
-
4 Essential Security Tools To Level Up Your Rails Security
brakeman is another useful Ruby gem that is a static analysis security vulnerability scanner for Ruby on Rails applications.
-
A note from our sponsor - AppSignal
www.appsignal.com | 7 Oct 2026
Stats
Basic Brakeman repo stats
21
7,274
8.1
7 days ago
presidentbeef/brakeman is an open source project licensed under GNU General Public License v3.0 or later which is an OSI approved license.
The primary programming language of Brakeman is Ruby.
Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com