EVERYTHING XIAOMI
Get listed
Ranked chart · Developer Tools

Best Ruby Static Analysis Tools in 2026

Ruby analyzers review source without executing the program. This chart sets security analysis, type checking, automated fixes and custom rules beside free and paid choices. Check the platform before choosing.

21 appsSorted 9 Nov 2026How we rank
18.0
DeepSource logo

DeepSource is an AI code review platform for teams writing code with AI.

Free planWebAPILinux
From $30 a month
27.5
GitHub CodeQL logo

GitHub CodeQL is a language and toolchain for analyzing code as data.

Free planWebExtensionLinux
From $30 a month
37.2
Qlty Cloud logo

Qlty Cloud analyzes code quality and coverage, then reports feedback on pull requests.

Free planWebAPIExtension
From $20 a month
  1. 4Codacy logo

    Codacy

    Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.

    Free planWebExtension
    7.0From $18 a year
  2. 5Semgrep Supply Chain logo

    Semgrep Supply Chain

    Semgrep Supply Chain helps development teams identify vulnerabilities in open-source dependencies, detect malicious packages, and assess whether…

    Free planWebAPILinuxmacOS
    7.0From $30 a month
  3. 6

    Reek

    Reek is a free, open-source tool for examining Ruby classes, modules, and methods for code smells.

    Free planLinux
    6.2Free plan
  4. 7

    Brakeman

    Brakeman is a static analysis scanner for Ruby on Rails application code.

    Free planLinuxSelf-hosted
    6.0Free plan
  5. 8

    bundler-audit

    Free planLinuxmacOS
    6.0Free plan
  6. 9RuboCop logo

    RuboCop

    Free planLinuxSelf-hosted
    6.0Free plan
  7. 10

    Dawnscanner

    Dawnscanner is a free, MIT-licensed static analysis security scanner for Ruby web applications.

    Free planLinuxSelf-hosted
    5.8Free plan
  8. 11

    OpenText Fortify SAST

    WebLinuxmacOSWindows
    5.3
  9. 12
    5.0
  10. 13

    Flay

    LinuxmacOSWindows
    4.7
  11. 14

    Rails Best Practices

    LinuxmacOSWindows
    4.7
  12. 15

    RubyCritic

    LinuxmacOSWindows
    4.7
  13. 16

    Steep

    LinuxmacOSWindows
    4.7
  14. 17

    Sorbet

    LinuxmacOS
    4.6
  15. 18
    4.3
  16. 19
    4.3
  17. 20
    4.3
  18. 21
    4.3

Choosing well

Compare free and paid access

Several listed tools provide free plans, and some services include trial periods. Check what the free tier includes before committing.

Published starting prices include $18 per user per month for Codacy on annual billing and $24 per user per month for DeepSource on annual billing. Qlty Cloud lists plans from $20 per month, while Fortify SAST provides pricing on request.

Match the checks to your code

The comparison shows whether each tool handles security analysis, type checking, automated fixes and custom rules. Prioritise the checks that fit your review process.

Tools such as Brakeman, bundler-audit and Dawnscanner are named in the list; review their entries for the checks and plans they provide.

Choose a hosting model

A hosted service can reduce setup work, while a self-hosted option keeps deployment under your control. The comparison covers hosted and self-hosted availability.

API access is also part of the platform comparison, which can matter when connecting analysis to other development systems.

Check where it runs

The listed platform set includes Linux, macOS, Windows and web, plus self-hosted and API options. Confirm the exact platform entry for the tool you are considering.

If you want to review results on an Android phone or tablet, look for explicit Android support rather than assuming a web or API entry means there is an Android app.

Review licence and source

Among the open-source entries are bundler-audit, Dawnscanner, ERB Lint, Flay, Flog and Rails Best Practices. Read the licence when you need to inspect or change code.

Commercial and freemium tools use their own pricing terms, so compare those terms with your deployment needs.

Questions people ask

Are free Ruby static analysis tools available?

Yes. Free plans and open-source entries include bundler-audit, Dawnscanner, ERB Lint, Flay, Flog and Rails Best Practices.

Do these tools have Android apps?

Android is not named in the listed platform facts. Verify each entry rather than assuming an Android app; the stated platforms include Linux, macOS, Windows, web, self-hosted and API.

Which checks can I compare?

You can compare security analysis, type checking, automated fixes and custom rules, as well as hosted and self-hosted availability.

Can I try a tool before paying?

Tools on the list offer free trials. Codacy and DeepSource specify 14-day trials; other entries provide free plans or paid pricing.

What paid starting prices are listed?

Listed starting points are $18 per user per month for Codacy with annual billing, $24 for DeepSource on annual billing, $20 per month for Qlty Cloud and $30 per month for GitHub CodeQL.

More in Developer Tools

The whole section