How to Testing Security of the web application


I am currently using Ruby Cucumber test framework to test Java based web

Are there any gems available to test security features like source is
always https for all images etc…

I sa couple like Brakeman but they are for Rails application not Java
applications…I am looking for something which will integrate with
Ruby test framework & tests Java web application.