Brakeman

Brakeman is a professional-grade security scanning tool for Ruby on Rails applications. It detects and reports potential security vulnerabilities, including SQL injection and cross-site scripting (XSS) attacks.