diff --git a/Gemfile b/Gemfile
index 3808f3bf..5840a752 100644
--- a/Gemfile
+++ b/Gemfile
@@ -49,6 +49,7 @@ group :test do
   gem 'rspec-rails'
   gem 'shoulda-matchers'
   gem 'simplecov', require: false
+  gem 'brakeman', require: false
 end
 
 group :development, :test do
diff --git a/Gemfile.lock b/Gemfile.lock
index 54d2c508..f62a561a 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -55,6 +55,7 @@ GEM
       rack (>= 0.9.0)
     binding_of_caller (0.7.2)
       debug_inspector (>= 0.0.1)
+    brakeman (3.3.2)
     builder (3.2.2)
     byebug (9.0.5)
     climate_control (0.0.3)
@@ -271,6 +272,7 @@ DEPENDENCIES
   best_in_place
   better_errors
   binding_of_caller
+  brakeman
   coffee-rails
   delayed_job (~> 4.0.2)
   delayed_job_active_record (~> 4.0.1)