Brakeman

Brakeman is an open source vulnerability scanner specifically designed for Ruby on Rails applications. It statically analyzes Rails application code to find security issues at any stage of development.

http://brakemanscanner.org/
http://rails-brakeman.com/
https://github.com/presidentbeef/brakeman

$ gem install brakeman
Fetching: terminal-table-1.4.5.gem (100%)
Fetching: fastercsv-1.5.5.gem (100%)
Fetching: highline-1.6.14.gem (100%)
Fetching: haml-3.1.7.gem (100%)
Fetching: json_pure-1.7.5.gem (100%)
Fetching: brakeman-1.7.1.gem (100%)
...


$ brakeman -o report.html
$ open -a Safari report.html

cool!!!