Free and open first
Best Ruby Static Analysis Tools in 2026
Ruby static analysis tools review Ruby code for security analysis, type checking, automated fixes, custom rules, and related code checks. This list is for developers comparing code-focused tools and services.
- 21 apps
- Research read 7 Oct 2026
- How the order is worked out
- 1
DeepSource
Free plan APILinuxMac+3DeepSource combines pull request review with security scans and code-coverage thresholds. Compare the free tier’s monthly allowances with your review volume, and note the annual billing on Team.
- 2
Brakeman
Free plan LinuxSelf-hostedBrakeman focuses on security analysis for Rails code and offers multiple ways to install, report results, and automate scans.
7.4 Visit site - 3
bundler-audit
Free plan LinuxMacbundler-audit focuses on lockfile checks for Ruby and Bundler projects, with offline use, advisory controls and Rake tasks.
- 4
GitHub CodeQL
Free plan ExtensionLinuxMac+3 - 5
Codacy
Free plan ExtensionWebCodacy brings code review, security scanning, and coding standards into a cloud platform for engineering teams.
- 6
Dawnscanner
Free plan LinuxSelf-hostedDawnscanner combines framework-aware Ruby checks with view-code analysis and mitigation guidance. Its text-only results and separate knowledge-base download are worth considering before adopting it.
- 7
Qlty Cloud
Free plan APIExtensionLinux+3Qlty Cloud combines code analysis, pull-request feedback, and coverage workflows. Compare the monthly analysis and autofix allowances with your team's usage before choosing a plan.
- 8
Semgrep Supply Chain
Free plan APILinuxMac+2Semgrep Supply Chain combines dependency security, reachability analysis, malware detection, and upgrade workflows in one service.
- 9
RuboCop
Free plan LinuxSelf-hostedRuboCop provides configurable Ruby linting, formatting, editor integration, and CI reporting at no cost. Its plugin and autocorrection options support both new projects and legacy codebases.
- 10
Reek
Free plan LinuxReek provides configurable Ruby smell detection with several output formats and integrations.
- 11
Flay
Free plan LinuxMacWindows - 12
Rails Best Practices
Free plan LinuxMacWindows - 13
RubyCritic
Free plan LinuxMacWindows - 14
ERB Lint
Free plan - 15
Flog
Free plan - 16
Snyk Code
Free plan Web - 17
Steep
Free plan LinuxMacWindows - 18
Sorbet
Free plan LinuxMac - 19
Slim-Lint
Free plan - 20
TypeProf
Free plan - 21
OpenText Fortify SAST
Paid LinuxMacWeb+1Choose OpenText Fortify SAST if your team needs static analysis across source code, bytecode, or binaries, with development workflow support and custom rules.
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price
Compare free plans, trial terms, paid pricing, and licence conditions before choosing. Check whether a tool fits your platform and whether hosted, self-hosted, or API access matches your workflow.
Questions
Are free Ruby static analysis tools available?
Yes. The list includes tools with free plans and open-source options. Check the pricing note and licence before choosing.
Which tools offer a free trial?
Trial availability varies. Codacy and DeepSource list 14-day trials; check current terms before signing up.
What platforms are covered?
Platforms represented include Linux, macOS, Windows, web, self-hosted environments, and API access.
How do paid prices compare?
Listed starting prices include $18/user/mo annually for Codacy, $24/user/mo annually for DeepSource, $30/mo for GitHub CodeQL, and $20/mo for Qlty Cloud. Fortify SAST uses pricing on request.
Can I read or modify the source code?
Check the project's licence before choosing. Bundler-audit and Dawnscanner are marked open source; licence terms may differ for other tools.