Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Brakeman

#25 of 26 in SAST ToolsRuby Static Analysis ToolsStatic Application Security Testing SoftwareStatic Application Security Testing Sast+1 more

Brakeman: A Rails-focused SAST tool with configurable checks, CI automation, and editor findings. Ranked #25 of 26 in SAST Tools by our editors (6.7/10); pricing: Paid; best for ruby on Rails teams.

6.7/10Editor score
Visit Brakeman
Brakeman6.7 Visit Brakeman

At a glance

  • Editor score
    6.7 / 10
  • Pricing
    Paid
  • Best for
    Ruby on Rails teams
  • Facts checked
    21 Sep 2026
Brakeman screenshot

  • Where it wins

    • Rails-specific checks run with zero configuration.
    • Supports SARIF, JUnit, HTML, JSON, and other report formats.
    • Integrates with CI systems and Ruby LSP-supported editors.

  • Where it doesn't

    • Commercial use requires a commercial, non-free license.
    • Its verified focus is limited to Ruby on Rails.
    • Command-line workflows may not suit teams seeking a broader platform.

Our verdict on Brakeman

Brakeman is a command-line static-analysis security scanner for Ruby on Rails application source code. It examines source without requiring the full application stack and identifies potential issues such as SQL injection, cross-site scripting, command injection, and unsafe deserialization. Rails teams can start with default settings, while security and development teams can tune checks, severity thresholds, confidence levels, and warning suppression to fit their review process.

Its strongest fit is an engineering workflow centered on Ruby and Rails. Brakeman can generate text, HTML, JSON, JUnit, Markdown, CSV, SARIF, and other report formats, which supports local review and automated pipelines. CI integrations include Jenkins, GitLab CI, Travis CI, Semaphore CI, and Electric Cloud. Ruby LSP integration adds inline findings in supported editors, while Guard::Brakeman and ALE for Vim extend the surrounding Ruby tooling. Selectable, excluded, and additional custom checks give teams control over how scanning is applied.

Commercial licensing is an important buying consideration. The current license permits use without charge for non-commercial purposes, while commercial use requires a commercial, non-free license. Teams evaluating Brakeman should therefore clarify licensing terms with Synopsys before adopting it in a commercial environment. Brakeman suits organizations that want focused Rails source analysis, configurable findings, and CI-oriented reporting. Teams securing applications across multiple languages or frameworks should choose a SAST product with broader verified coverage instead.

Your product? Our editors can test Brakeman in depth and publish a review, labelled as paid · from $149/mo →

Brakeman pricing

Plans Paid No free plan — trial or paid only. Prices checked 21 Sep 2026.
See plans on brakemanscanner.org

Brakeman fact sheet

Free planNot verified
Paid fromNot verified
Analysis targetssource code
Languages supportedNot verified
Pull request scansNot verified
IDE supportYes
CI/CD integrationYes
Custom security rulesYes
Automated fixesNot verified
DeploymentSelf-hosted
SupportDocs, Community
Built forSolo, Small business, Mid-market, Enterprise (editorial estimate)
Integrations9 integrations: Jenkins, GitHub Actions, Guard, Ruby LSP, Vim ALE, Travis CI …
PricingPaid
Websitebrakemanscanner.org
Facts checked21 Sep 2026

Brakeman integrations

Brakeman lists 9 integrations on its own site.

  • Jenkins
  • GitHub Actions
  • Guard
  • Ruby LSP
  • Vim ALE
  • Travis CI
  • Semaphore CI
  • Electric Cloud
  • GitLab CI

Alternatives to Brakeman

See all Brakeman alternatives →

Also Ranked In

Brakeman is ranked in 5 of our directories.

Used Brakeman? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Brakeman for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Brakeman 6.7/10

Brakeman is listed in our SAST Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/brakeman/"><img src="https://www.itechguides.com/best/badge/brakeman.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update