Ruby on Rails has an out-of-the-box default security framework that provides basic protection from common attack vectors.