Semgrep
Semgrep

Semgrep

DR77Ahrefs DR: 77/100. Top 25%. Measured by Ahrefs. Median 44.Agent63Agent Readiness: 63/100. Top 25%. Measured by StartupHub.ai. Median 41.

Semgrep is an open-source static analysis tool that helps developers find and fix bugs and security vulnerabilities in their code.

Active273San Francisco, United States

We may earn a commission from links on this Semgrep profile. That does not change the facts we publish.

About

Semgrep offers an AI-assisted application security platform that combines rule-based detection with AI reasoning for SAST, SCA, and secrets detection. Their platform helps organizations automate, manage, and enforce security across development workflows, including scanning and fixing AI-generated code. Semgrep serves developers, startups, and various industries like Fintech and SaaS & Cloud.

Key facts

Website
semgrep.dev
Headquarters
San Francisco, United States
Employees
273
Total funding
$30M (Series A)
Business model
B2B

Funding rounds

Funding rounds raised by Semgrep
DateRoundAmountLead investors
1 Mar 2023Series A$20MIndex Ventures
20 Apr 2021Seed$10MAnother VC

Tech stack

Detected on semgrep.dev, last scanned 17 Oct 2026.

Frontend
Tailwind CSS, Bootstrap
Analytics
Google Tag Manager
SEO
Bitly
Observability
FullStory
CDN
AWS CloudFront, Netlify
Email provider
Google Workspace
Cookie consent
OneTrust
Status page
Statuspage
Affiliate program
Self-hosted affiliate

Semgrep scores 77. Does yours?

That is its Ahrefs DR: the backlink strength of a domain, on the Ahrefs 0 to 100 scale. Paste your website and you get yours in about a minute.

Comments
(5)

5 reviews from Reddit gathered in one place

Reddit
r/PracticalDevSecOpsu/Expert-Inspector4889Jul 1, 2026MixedReddit

Semgrep's default rules were decent but not impressive on their own. The value showed up after I wrote 2 custom rules for how this codebase "should" be written, and then it caught several cross-file auth flaws that Bandit missed.

Reddit
r/google_antigravityu/iCreatyMay 24, 2026NegativeReddit

Since updating to Antigravity 2.0 then moving back to the IDE, it keeps spawning hundreds of semgrep-core-proprietary processes, and using all 24GB of memory and then freezing my MacBook? Has anyone else had this issue and found a fix for i…

Reddit
r/securityu/Unique_Buy_3905Mar 26, 2026MixedReddit

We have been using Semgrep for SAST and like the developer experience, the custom rules are flexible and it plugs into our workflow cleanly. But the SCA coverage is limited and there is no real correlation layer between what Semgrep finds a…

Reddit
r/cybersecurityu/OutsideOrnery6990Mar 6, 2026MixedReddit

I know a lot of people recommend the free version of Semgrep, Snyk, Aikido Security, and some others. But I also heard people say that these tools are not really adequate for production applications, which I understand free tools have limit…

Reddit
r/ExperiencedDevsu/Peace_Seeker_1319Feb 12, 2026NegativeReddit

our entire static analysis stack - SonarQube, Semgrep, and a $35k/year Checkmarx enterprise license - found nothing. what happened is: // POST /webhooks/stripe async function handlePaymentSuccess(req, res) { const event = req.body; const se…

Each quote is copied word for word and links to where it was posted. Promotion and off-topic posts are filtered out.

Frequently asked

How much funding has Semgrep raised?

Semgrep has raised a total of $30M in funding. The most recent round on record is Series A.

How many employees does Semgrep have?

Semgrep has approximately 273 people on record.

Does Semgrep have an affiliate program?

Yes, Semgrep has an affiliate program. The program runs on Self-hosted affiliate. Register here: semgrep.dev/affiliates

Public record

SEC filings, insider activity, nonprofit links and pay benchmarks for Semgrep