dawnscanner | static analysis security scanner for ruby written web | Application Framework library

dawnscanner is a Ruby library typically used in Server, Application Framework, Ruby On Rails applications. dawnscanner has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

When you run dawnscanner on your code it parses your project Gemfile.lock looking for the gems used and it tries to detect the ruby interpreter version you are using or you declared in your ruby version management tool you like most (RVM, rbenv, ...). Then the tool tries to detect the MVC framework your web application uses and it applies the security check accordingly. There checks designed to match rails application or checks that are appliable to any ruby code. dawnscanner can also understand the code in your views and to backtrack sinks to spot cross site scripting and sql injections introduced by the code you actually wrote. In the project roadmap this is the code most of the future development effort will be focused on. dawnscanner security scan result is a list of vulnerabilities with some mitigation actions you want to follow in order to build a stronger web application.