Free and open first
Best Ruby Static Analysis Tools in 2026
- 21 apps
- Research read 7 Oct 2026
- How the order is worked out
- 1
DeepSource
Free plan APILinuxMac+3DeepSource combines pull request review with security scans and code-coverage thresholds. Compare the free tier’s monthly allowances with your review volume, and note the annual billing on Team.
- 2
Brakeman
Free plan LinuxSelf-hostedBrakeman focuses on security analysis for Rails code and offers multiple ways to install, report results, and automate scans.
7.4 Visit site - 3
bundler-audit
Free plan LinuxMacbundler-audit focuses on lockfile checks for Ruby and Bundler projects, with offline use, advisory controls and Rake tasks.
- 4
GitHub CodeQL
Free plan ExtensionLinuxMac+3 - 5
Codacy
Free plan ExtensionWebCodacy brings code review, security scanning, and coding standards into a cloud platform for engineering teams.
- 6
Dawnscanner
Free plan LinuxSelf-hostedDawnscanner combines framework-aware Ruby checks with view-code analysis and mitigation guidance. Its text-only results and separate knowledge-base download are worth considering before adopting it.
- 7
Qlty Cloud
Free plan APIExtensionLinux+3Qlty Cloud combines code analysis, pull-request feedback, and coverage workflows. Compare the monthly analysis and autofix allowances with your team's usage before choosing a plan.
- 8
Semgrep Supply Chain
Free plan APILinuxMac+2Semgrep Supply Chain combines dependency security, reachability analysis, malware detection, and upgrade workflows in one service.
- 9
RuboCop
Free plan LinuxSelf-hostedRuboCop provides configurable Ruby linting, formatting, editor integration, and CI reporting at no cost. Its plugin and autocorrection options support both new projects and legacy codebases.
- 10
Reek
Free plan LinuxReek provides configurable Ruby smell detection with several output formats and integrations.
- 11
Flay
Free plan LinuxMacWindows - 12
Rails Best Practices
Free plan LinuxMacWindows - 13
RubyCritic
Free plan LinuxMacWindows - 14
ERB Lint
Free plan - 15
Flog
Free plan - 16
Snyk Code
Free plan Web - 17
Steep
Free plan LinuxMacWindows - 18
Sorbet
Free plan LinuxMac - 19
Slim-Lint
Free plan - 20
TypeProf
Free plan - 21
OpenText Fortify SAST
Paid LinuxMacWeb+1Choose OpenText Fortify SAST if your team needs static analysis across source code, bytecode, or binaries, with development workflow support and custom rules.
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price