If you have a mid-sized Rails app, with say 2-3 developers working on it, a full time security engineer would probably be overkill. Anyone have any recommendations of services/consultancies to be able to tell "oh, someone is hacking us right now" or "our page which has stripe.js on it has been compromised"?
I'm hoping for automated tools, services to install on our servers, or security auditors who have an out of the box package.
I'm hoping for automated tools, services to install on our servers, or security auditors who have an out of the box package.
This is the only automated tool I know about: http://brakemanscanner.org/