The first Rails security book In 2008 I wrote a free, compact-style book about Rails security for the Open Web Application Security Project (OWASP). Naturally, it is now outdated, but it served as the basis for the official guide. Note about the book: It’s made available to the community completely free of charge. You may read it, send it to your colleagues and link to this page from your blog. Co