A static analysis security scanner for Ruby web applications, supporting Rails, Sinatra, and Padrino frameworks.
Dawnscanner is a static analysis security scanner for Ruby web applications. It scans source code to identify security vulnerabilities by checking dependencies and analyzing custom code, supporting major Ruby MVC frameworks like Rails, Sinatra, and Padrino. The tool helps developers detect and mitigate security issues early in the development process.
Ruby developers and security engineers building web applications with Rails, Sinatra, or Padrino who need automated security scanning integrated into their workflow.
Developers choose Dawnscanner for its comprehensive, regularly updated knowledge base with 680+ checks, multi-framework support, and ability to analyze both dependencies and custom code for vulnerabilities like XSS and SQL injection.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Contains 680+ security checks updated weekly from the National Vulnerability Database, ensuring coverage of recent CVEs and dependencies.
Works out of the box with Ruby on Rails, Sinatra, and Padrino, making it versatile for various Ruby web application stacks.
Parses Gemfile.lock for gem and Ruby version issues while also analyzing custom view code to detect vulnerabilities like XSS and SQL injection.
Provides specific recommendations for fixing vulnerabilities, helping developers implement security improvements directly.
Requires users to manually download and unpack the knowledge base to a specific directory ($HOME/dawnscanner/kb), adding complexity to installation and updates.
Only outputs results in text format stored locally in timestamped directories, with no built-in support for JSON or other structured formats for easy integration.
The README notes that backtracking sinks for custom code is a future focus, indicating current capabilities may be less mature or incomplete.