This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

Project Information:template Ruby on Rails Security Guide V2

Jump to: navigation, search

Project Name OWASP Ruby on Rails Security Guide V2
Short Project Description The last security guide for Rails was a great success, with a lot of more secure web applications and continued awareness in the community of security issues. The Ruby on Rails Security Project is the one and only source of information about Rails security topics, and I keep the community up-to-date with blog posts and conference talks in Europe. The Guide and the Project has been mentioned in several Rails books and web-sites.

Version 1 of the Ruby on Rails Security Guide was sponsored by the SpoC 07, set the standard for OWASP programming language specific guides in terms of the topic outline and has been published as a book. Nevertheless I'm convinced that a more compact design and a "question-and-answer" style of writing will reach an even larger audience. Of course the new Guide will still include answers to the OWASP Top Ten security vulnerabilities.

A lot has changed since the publishing of the first Guide. Some new security holes have been found, there are new advises and most importantly Rails version 2.0 has been released. The new Ruby on Rails Security Guide aims at providing an up-to-date coding and configuration guide for the Rails community.

Project key Information Project Leader
Paolo Perego
Project Contributors
(if applicable)
Mailing List
Subscribe here
Use here
Creative Commons Attribution Share Alike 3.0
Project Type
Release Status Main Links Related Projects

Release Quality
Please see here for complete information.

OWASP Ruby on Rails Security Guide V.2: PDF&Word - NEW RELEASE!
PDF Presentation

OWASP Web Application Security Put Into Practice
OWASP Testing Project