Skip to content
SPECIFICTION
Get listed

Dawnscanner

github.com

Free plan LinuxSelf-hosted
Visit github.com
Spec score 7.8 #9 of 21 in Ruby Static Analysis Tools

Spec sheet

Purpose
Dawn is a static analysis security scanner for Ruby web applications.Read 8 Oct 2026 · github.com
Support
The README invites users to provide feedback and support the project by opening an issue with a reference.Read 8 Oct 2026 · github.com
Analysis
Dawn reads Gemfile.lock, detects the Ruby version and MVC framework, and applies relevant checks.Read 8 Oct 2026 · github.com
Checks
The README says version 2.0 has more than 680 security checks in its knowledge base.Read 8 Oct 2026 · github.com
Code analysis
It can analyze view code and trace sinks to identify cross-site scripting and SQL injection issues.Read 8 Oct 2026 · github.com
Distribution
The repository identifies the project as MIT licensed.Read 8 Oct 2026 · github.com
Frameworks
It supports Ruby on Rails, Sinatra, and Padrino applications.Read 8 Oct 2026 · github.com
Installation
The README instructs users to install the tool with `gem install dawnscanner` and download its knowledge base separately.Read 8 Oct 2026 · github.com
Integration
The README mentions use with GitHub hooks as an example of integrating Dawn into a release process.Read 8 Oct 2026 · github.com
Knowledge base
The knowledge base includes NIST CVE bulletins, custom checks, and OWASP Ruby on Rails cheat-sheet recommendations.Read 8 Oct 2026 · github.com
Results
Scan results list vulnerabilities and mitigation actions, and the README says they are available in text format only.Read 8 Oct 2026 · github.com
Security data updates
The knowledge-base repository lists v20240116 as its latest release.Read 8 Oct 2026 · github.com

Plans and prices

Dawnscanner Free MIT-licensed Ruby security scanner · runs locally from the command line Read 8 Oct 2026 · github.com

Every Dawnscanner plan and price →

Where Specifiction places it

Alternatives to DawnscannerAll alternatives →