Just a note on ragel: it can be used to create lexers, but that is not its distinguishing characteristic. It is a parser generator for regular languages.
I don't mean to snipe at Ragel, just Shaw's use of it as an amulet against vulnerabilities.
Zed's advocacy for Ragel is really about using parser generators to implement internet-facing parsers.