• sample report -

brakeman scan result for RailsGoat

OWASP/railsgoat

• When you run Brakeman for the first time on any older Rails application you might get a lot of findings. To not drown in findings and false positives, we will use some tricks to work through our security backlog.
• You should start with high severity findings and work your way to the low-risk issues. Approaching it level-by-level usually works the best and is the most efficient.