Rails security strategy (2015)
Complete Rails guide to developing a security strategy
Security on Rails (2009)
One of the early Rails security books
The official Ruby on Rails security guide
A complete guide about the basics of Rails security.
The first Rails security book
In 2008 I wrote a free, compact-style book about Rails security for the Open Web Application Security Project (OWASP). Naturally, it is now outdated, but it served as the basis for the official guide.
Note about the book: It’s made available to the community completely free of charge. You may read it, send it to your colleagues and link to this page from your blog. Conditions:
Attribution. You must attribute the work and keep the original copyright notice.
Share — You are free to copy, distribute and transmit the work.
Remix — You are free to adapt the work.
Noncommercial. You may not use this work for commercial purposes.