fromRubyflow
1 week agoBeskar - Rails Security Engine for the Paranoid (vibe-coded during SOC 2 audits)
Beskar is a Rails engine that fills that gap with layered protection: WAF that detects vulnerability scanning patterns (WordPress, config files, path traversal) Impossible travel detection using geolocation and Haversine calculations Smart rate limiting that identifies attack patterns (brute force, credential stuffing, distributed attacks) Risk-based account locking with automatic responses Persistent IP banning with escalating durations Installation is deliberately simple - drop it in your Gemfile, run the installer, add one line to your User model. Runs in monitor-only mode by default so you can tune thresholds before blocking real traffic.
