"A rails app" could be a rails default build, or Github. You should get significantly better results the more one pays - because of the human element. For exa

"A rails app" could be a rails default build, or Github. You should get significantly better results the more one pays - because of the human element. For example, $1k gets you a basic Nessus/Nmap (basic vulnerability/mapping) scans, maybe SQL vuln, with automated reporting. More gets you architecture, infrastructure, penetration, white/black scenarios, risk assessment, external organization liability, code repo, data, compliance, and regulatory footing. Those can surpass $100k easily.