Developer Tools·Standings
Ruby Static Analysis Tools Compared
Ruby static analysis tools scan Ruby code to flag potential security vulnerabilities, type issues, and other concerns. Compare security analysis, type checking, and automated fixes to see which checks fit your needs.
The board uses a signal score out of 10 and marks for a public API, open-source code, and a free tier. Review rule customization, deployment choices, supported platforms, and cost as well.
- 21 platforms
- 2 with a public API on this page
- 20 with a free tier
- Checked 7 Oct 2026
- 1 D
DeepSourcedeepsource.comDeepSource analyzes commits for code-health problems, security vulnerabilities and supply-chain risks, then helps remediate them.
- 2 GC
GitHub CodeQLcodeql.github.comA code analysis tool for security, correctness, and readability, with support for custom queries.
- 3 QC
Qlty Cloudqlty.shQlty Cloud analyzes code for quality issues and coverage and provides feedback on pull requests.
- 4 RReekgithub.com
A free, open-source Ruby tool that reports code smells in classes, modules, and methods.
- 5 SS
Semgrep Supply Chainsemgrep.devA dependency security tool that detects vulnerabilities and malware and offers upgrade guidance.
- 6 R
RuboCoprubocop.orgA free, open-source Ruby tool flags style, layout, naming, complexity, and security issues.
- 7 BAbundler-auditgithub.com
A free, open-source tool finds vulnerable gem versions and insecure sources in Gemfile.lock.
- 8 BBrakemanbrakemanscanner.org
Brakeman is a static analysis scanner that checks Ruby on Rails application code for potential security vulnerabilities.
- 9 C
Codacycodacy.comA code review tool offers pull request summaries, fix suggestions, and automatic false-positive detection.
- 10 DDawnscannergithub.com
A free, open-source security scanner for Ruby web apps built with Rails, Sinatra, or Padrino.
- 11 FFlaygithub.com
A free tool for Ruby code analysis; it does not offer security checks or automatic fixes.
- 12 RBRails Best Practicesgithub.com
A free tool for Ruby code analysis with custom rules, but no security checks or automatic fixes.
- 13 RRubyCriticgithub.com
A free Ruby analysis tool with custom rules, but no security checks or automatic fixes.
- 14 SSteepgithub.com
- 15 SCSnyk Codesnyk.io
A code security tool with automatic fixes and custom rules.
- 16 SSorbetsorbet.org
- 17 ELERB Lintgithub.com
- 18 FFloggithub.com
- 19 SLSlim-Lintgithub.com
A free, self-hosted tool for checking Slim templates with custom rules, but no security analysis.
- 20 TTypeProfgithub.com
A Ruby tool that checks for type issues and can run on your server.
- 21 OFOpenText Fortify SASTopentext.com
Places #1, #2, #3, #4, #5 on this board are open to sponsors. Take #1 · Other ways to advertise
How to choose
Which checks does it need to run?
The board lists security analysis, type checking, automated fixes, and custom rules, so begin by identifying which of these your codebase needs.
If you need a particular combination, confirm those capabilities before choosing.
Where does it need to run?
Platform labels cover Linux, macOS, Windows, web, self-hosted deployments, and API support.
Choose based on where your team works and whether you want a hosted option, a self-hosted option, or both.
Does it have a free plan or trial?
Check the free-plan and free-trial labels separately; a free plan and a time-limited trial are different offers.
Codacy’s listed terms include a free plan, a 14-day trial, and paid pricing from $18 per user monthly with annual billing. DeepSource lists a free plan and 14-day trial, with annual-billing prices starting at $24 per user monthly.
Should it be hosted or self-hosted?
The board records hosted and self-hosted availability so you can compare the choices with your preferred setup.
For example, OpenText Fortify SAST lists Linux, macOS, web, and Windows platforms, and its pricing is available on request.
Do you need an API or open-source code?
Use the public API and open-source marks to check whether those options are available for a tool.
If you need to read or change the code, check the tool's license before choosing; the board also compares documentation depth.
Questions
What is a Ruby static analysis tool used for?
It analyzes Ruby code. The board lists checks for security, types, automated fixes, and custom rules.
How do I compare Ruby static analysis tools?
Look at the checks offered, supported platforms, hosting choices, pricing, and whether public API access, open-source code, or a free tier is listed.
Which Ruby static analysis tools have a free plan?
Use the free-plan label to compare offers. For example, Brakeman and Codacy list a free plan.
Are there Ruby static analysis tools with a free trial?
Codacy and DeepSource list free plans and 14-day trials.
Can I self-host a Ruby static analysis tool?
The board compares self-hosted options. Check the label for a tool to see whether that setup is listed.
How are Ruby static analysis tools scored?
The signal score out of 10 reflects usage, a public API, documentation depth, open-source code, and a free tier, weighted as described above.
Some top positions on this board can be paid placements, standing where they were sold. The facts on each platform are not for sale. How we rank · Disclosure