diff --git a/Gemfile b/Gemfile
index ef87c1d2d..5ce21fae3 100644
--- a/Gemfile
+++ b/Gemfile
@@ -18,6 +18,7 @@ gem "sqlite3", ">= 2.0"
 gem "bcrypt", "~> 3.1.7"
 
 group :development, :test do
+  gem "brakeman", require: false
   gem "rubocop-rails-omakase", require: false
 end
 
diff --git a/Gemfile.lock b/Gemfile.lock
index eb7acc956..ddd5b3ea0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -106,6 +106,8 @@ GEM
     bigdecimal (3.1.8)
     bootsnap (1.18.3)
       msgpack (~> 1.2)
+    brakeman (6.1.2)
+      racc
     builder (3.3.0)
     capybara (3.40.0)
       addressable
@@ -299,6 +301,7 @@ PLATFORMS
 DEPENDENCIES
   bcrypt (~> 3.1.7)
   bootsnap
+  brakeman
   capybara
   importmap-rails
   propshaft