Should I get a penetration test instead of a code review?
Do both, but in order. A penetration test is a snapshot - it tells you what’s wrong, from the outside, on the day it runs. Code review is how you avoid shipping those problems in the first place, which is why it’s part of every project we take on, pen test or not. If you already have a pen test scheduled, we can review your Rails code first, so the pen testers spend their time on genuinely hard-to-find issues instead of ones a code review would already have caught. See our security review services for more.