Vulnerability Scanning for your Ruby on Rails app!
With the Spektr vulnerability scanner, you can find security issues before shipping them!
Try it
Automated vulnerability scanning
Spektr scans your app for vulnerable code
You can focus on writing code, and Spektr will scan your app on your pull requests for security issues.
When an issue is found
We flag that on your pull request.
But Rails is secure, why would I even need this?
Rails has secure defaults but it still let's you shoot yourself in the leg quite easily.
There are many ways to accidentally introduce an XSS vulnerability or even remote code execution.
Spektr runs the following two checks on your code to prevent vulnerablities:
Dependency Check
We scan your application with bundler-audit and yarn audit, to warn you about known vulnerabilities in your dependencies. OWASP has a great article about why is this important: Vulnerable and Outdated Components.
SAST
We scan and analyse your application's source code for potential security issues like SQL Injection, XSS, etc. Our scanner is open-source, but if you choose the hosted option, you can see and manage the results on a UI.
