For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/application_security/setup/compatibility/ruby.md. A documentation index is available at /llms.txt.
This product is not supported for your selected Datadog site. ().

App and API Protection capabilities

The following App and API Protection capabilities are supported in the Ruby library, for the specified tracer version:

App and API Protection capabilityMinimum Ruby tracer version
HTTP Monitoring1.16.0
gRPC Monitoringnot supported
GraphQL Monitoring2.3.0
Exploit Prevention2.11.0
API Security2.29.0
Account Takeover Protection2.16.0
Runtime Activationnot supported
Runtime Software Composition Analysis (SCA)1.22.0
Runtime Code Analysis (IAST)not supported

The minimum tracer version to get all supported App and API Protection capabilities for Ruby is 2.29.0. The following capabilities are not yet supported: gRPC Monitoring, Runtime Activation, Runtime Code Analysis (IAST).

Supported deployment types

Deployment typeSupport
Docker
Kubernetes
Amazon ECS
AWS Fargate
AWS Lambda

Language and framework compatibility

Supported Ruby interpreters

The Datadog Ruby library supports the latest gem for the following Ruby interpreters:

  • MRI versions >=2.5 <3.5
  • JRuby versions >=9.2.21 <9.5

These are supported on the following architectures:

  • Linux (GNU) x86-64, aarch64
  • Alpine Linux (musl) x86-64, aarch64
  • macOS (Darwin) x86-64, arm64

Integrations

The Ruby tracer includes support for the following frameworks, data stores and libraries.

If you don't see your library of choice listed, fill out this short form to send details.

Web framework compatibility

  • Attacker source HTTP request details
  • Tags for the HTTP request (status code, method, etc)
  • Distributed Tracing to see attack flows through your applications
FrameworkHTTP MonitoringHTTP Blocking
Rack
Rails
Sinatra
Grape

User Authentication Frameworks compatibility

FrameworkAutomatic User Event Tracking
Devise

Networking framework compatibility

FrameworkServer-side Request Forgery (SSRF)
Faraday
Excon
Rest Client

Data store compatibility

Currently we are providing SQL Injection detection for ActiveRecord, which is part of the Rails web framework.

FrameworkSQL Injection (SQLi)
Rails
ActiveRecord

GraphQL compatibility

FrameworkGraphQL Monitoring
GraphQL Ruby