Class reloading in development mode Security features such as CSRF , Cross Site Scripting, etc. All provided by Rack::Protection and Sinatra.