Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Brakeman serves as a security assessment tool tailored for Ruby on Rails applications. In contrast to several typical web security scanners, Brakeman analyzes the actual source code of your application rather than requiring a full application stack setup. After scanning the application code, it generates a comprehensive report detailing all identified security vulnerabilities. Installation is straightforward, with Brakeman needing no additional setup or configuration—simply launch it. Since it operates solely on the source code, Brakeman can be executed at any phase of development; for instance, you can create a new application with "rails new" and promptly evaluate it using Brakeman. By not depending on spidering techniques to explore site pages, Brakeman ensures a more thorough assessment of an application, including those pages that may be under development and not yet publicly accessible. This capability allows Brakeman to potentially identify security weaknesses before they can be exploited by malicious actors. As a tool specifically designed for Ruby on Rails applications, Brakeman adeptly verifies configuration settings against established best practices, thereby enhancing overall application security. Its efficiency and ease of use make it an invaluable resource for developers focusing on secure coding practices.

Description

Achieve comprehensive risk visibility and assurance through a unified interface. Businesses turn to ZeroNorth (previously known as CYBRIC) for managing risks associated with software and infrastructure in a manner that keeps pace with their operational demands. The ZeroNorth platform enhances and streamlines the identification and resolution of vulnerabilities within software and infrastructure, transforming fragmented and manual efforts into a cohesive and organized approach. This platform uniquely empowers organizations to implement a consistent program for discovering and rectifying vulnerabilities, ensuring ongoing risk visibility and assurance, maximizing the utility of current scanning tools, and facilitating progress from any stage in their journey towards secure DevOps practices. By adopting this solution, companies can not only mitigate risks effectively but also foster a culture of continuous improvement in their security protocols.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

GitHub Yes 
Seeker Yes 
ArmorCode Yes 
Bitbucket No 
CodeFactor Yes 
Dradis Yes 
Google No 
JSON Yes 
Kondukto Yes 
Microsoft Azure No 
Microsoft Entra ID No 
Okta No 
Qualys TruRisk Platform No 
Qwiet AI No 
Ruby Yes 
SQL Yes 
Snyk No 
Sonatype SBOM Manager No 
ThreadFix Yes 

Integrations

GitHub Yes 
Seeker Yes 
ArmorCode No 
Bitbucket Yes 
CodeFactor No 
Dradis No 
Google Yes 
JSON No 
Kondukto No 
Microsoft Azure Yes 
Microsoft Entra ID Yes 
Okta Yes 
Qualys TruRisk Platform Yes 
Qwiet AI Yes 
Ruby No 
SQL No 
Snyk Yes 
Sonatype SBOM Manager Yes 
ThreadFix No 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Brakeman

Founded

2014

Website

brakemanscanner.org

Vendor Details

Company Name

ZeroNorth

Country

United States

Website

www.zeronorth.io

Product Features

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Product Features

Incident Management

Audit Trail No 
Corrective Actions (CAPA) No 
Disaster Recovery No 
IT Incident Management No 
Incident Reporting No 
OSHA Compliance No 
Root-Cause Diagnosis No 
Safety Management No 
Task Management No 
Ticket Management No 

IT Security

Anti Spam Yes 
Anti Virus Yes 
Email Attachment Protection Yes 
Event Tracking Yes 
IP Protection Yes 
Internet Usage Monitoring Yes 
Intrusion Detection System Yes 
Spyware Removal Yes 
Two-Factor Authentication Yes 
Vulnerability Scanning Yes 
Web Threat Management Yes 
Web Traffic Reporting Yes 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Alternatives

YAG-Suite Reviews

YAG-Suite

YAGAAN
PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
PT Application Inspector Reviews

PT Application Inspector

Positive Technologies