diff --git a/Gemfile b/Gemfile
index 839c2fe48..c6ed17aae 100644
--- a/Gemfile
+++ b/Gemfile
@@ -126,6 +126,7 @@ group :test do
 end
 
 group :development do
+  gem 'brakeman', require: false
   # Access an IRB console on exception pages or by using <%= console %> in views
   gem 'web-console'
   gem 'rack-handlers'
diff --git a/Gemfile.lock b/Gemfile.lock
index 8c2ca041e..1f6a4eee2 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -91,6 +91,7 @@ GEM
       sass (>= 3.3.4)
     bootstrap-wysihtml5-rails (0.3.3.8)
       railties (>= 3.0)
+    brakeman (3.7.0)
     browser (2.3.0)
     builder (3.2.3)
     byebug (9.0.6)
@@ -682,6 +683,7 @@ DEPENDENCIES
   bootstrap-datepicker-rails
   bootstrap-sass (~> 3.3.5)
   bootstrap-wysihtml5-rails (~> 0.3.3.8)
+  brakeman
   browser
   byebug
   capybara