--- title: Brakeman Reviews meta_title: 'Brakeman Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter reviews by the users' company size, role or industry to find out how Brakeman works for a business like yours. aggregate_rating: rating_value: 5.0 review_count: 1 scale: '5' date_modified: '2026-09-22' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops ---

Brakeman Reviews & Product Details

Top-Rated Alternatives

Wiz

Red Hat Ansible Automation Platform

Red Hat Ansible Automation Platform

Tenable Nessus

View All Alternatives

UI

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

11/19/2019

"Ruby On Rails vulnerabilities scanner"

5/5

What do you like best about Brakeman?

Since brakeman is provided as a gem, it integrates easily with any ruby on rails app or gem. It runs effortlessly on terminal and provides an easy to read vulnerability report. Brakeman can also be plugged into a jenkins job while building a rails app so that vulnerability reports can be generated while building or deploying an app to sandbox or production environments. linter rules can be set to cause a jenkins build to fail on vulnerabilities issues. There are not many vulnerability scanning options so Review collected by and hosted on G2.com.

What do you dislike about Brakeman?

The report generation is very basic. Could use some better formatting or links to vulnerabilities. Review collected by and hosted on G2.com.

What problems is Brakeman solving and how is that benefiting you?

We could not find any better option for vulnerability scanning for rails applications. While developing we run brakeman manually in the terminal to verify that any code changes did not introduce any new vulnerabilities. Also integration with jenkins allows us to scan the rails application before the code reaches production. Review collected by and hosted on G2.com.

There are not enough reviews of Brakeman for G2 to provide buying insight. Below are some alternatives with more reviews:

Wiz is a CNAPP that consolidates CSPM, KSPM, CWPP, vulnerability management, IaC scanning, CIEM, DSPM, and container and Kubernetes security into a single platform.

Red Hat Ansible Automation Platform

Red Hat Ansible Automation Platform is a simple way to automate apps and infrastructure. Application Deployment + Configuration Management + Continuous Delivery.

From the beginning, we've worked hand-in-hand with the security community. We continuously optimize Nessus based on community feedback to make it the most accurate and comprehensive vulnerability assessment solution in the market. 20 years later and we're still laser focused on community collaboration and product innovation to provide the most accurate and complete vulnerability data - so you don't miss critical issues which could put your organization at risk. Tenable is a 2021 Gartner Representative Vendor in Vulnerability Assessment.

Harness Platform

Harness is the first Continuous Delivery-as-a-Service platform that uses Machine Learning to simplify the entire process of delivering code from artifact into production – quickly, safely, securely, and repeatably.

Get workload-level visibility into AWS, Azure, and GCP without the operational costs of agents. You could buy three tools instead… but why? Orca replaces legacy vulnerability assessment tools, CSPM, and CWPP. Deploys in minutes, not months.

Gearset is the most trusted DevOps platform with a full suite of powerful solutions for every team developing on Salesforce. Deploy: Achieve fast, reliable metadata and data deployments, including sandbox seeding, Vlocity, CPQ and Flows. Automate: Speed up your end-to-end release management with CI/CD and pipelines, for both regular releases and long term projects. Data management: Securely back up, archive, and restore your data with confidence.

Aikido Security

Aikido Security is a developer-first software security platform. We scan your source code & cloud to show you which vulnerabilities are actually important to solve. Triaging is sped up by massively reducing false-positives and making CVEs human-readable. Aikido makes it simple to keep your product secure and gives you back time to do what youdo best: writing code.

Astra security is a cybersecurity company that provides multiple features of protecting your website or company online. The comprehensive suite efficiently helps uncover vulnerabilities in thousands of apps & networks. Preventing data breaches and network compromise. 🧑‍💻 It offers Vulnerability Assessment and Penetration Testing (VAPT) for Website/Web App, Mobile App, SaaS, APIs, Cloud Infrastructure (AWS/Azure/GCP), Network Devices (Firewall, Router, Server, Switch, Printer, Camera, etc), Blockchain/Smart Contract, and more. ✨ Key highlighted features of Astra Pentest Suite: - A shiny bright dashboard that displays managed automated & manual pentesting - More than 2500+ security tests - Detailed Vulnerability Scanning & Reporting - Easy Vulnerability Management - Industry Recognized Verifiable VAPT Certificate ⚡️ Other features: - OWASP, SANS 25 standard testing - One-click actions for report download, email & more - CXO & developer-friendly dashboard - Contextual bug fix collaboration between your developers & security team

CrowdStrike Falcon Cloud Security

CrowdStrike Falcon® Cloud Security delivers advanced cloud-native application security, including breach prevention, workload protection and cloud security posture management. It's the industry’s only unified cloud-native application protection platform (CNAPP), which integrates agent-based and agentless protection to stop adversaries, prevents human error and meets compliance needs across all major clouds, workloads and operating systems to stop cloud breaches.

Intruder is a proactive security monitoring platform for internet-facing systems.

Questions about Brakeman? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

Ask about Brakeman

GU

Guest User

What is Brakeman used for?

0 Upvotes

0

Join the conversation

View all Discussions

Pricing

Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more.

View More Pricing Information

Work at Brakeman?

Claim this profile to respond to reviews, update product info, and reach in-market buyers.

Claim this profile

Categories on G2

Vulnerability Scanner

Explore More

DataGrail vs MineOS for pulling data from every connected system to fulfill DSARs?Which 3D modeling software is best for architectural visualization on a mid-range PC where clients need realistic walkthroughs without a render farm?Top-rated construction PM platforms for large projects

Which Gallery Management tools reliably handle high-traffic periods without significant performance degradation?Which age verification methods balance regulatory acceptance against the personal data a business must then hold?Which Constant Contact Consulting firms are most helpful for small business marketing teams?

Show MoreShow Less