
Semgrep
Semgrep is an open-source static analysis tool that helps developers find and fix bugs and security vulnerabilities in their code.
We may earn a commission from links on this Semgrep profile. That does not change the facts we publish.
About
Semgrep offers an AI-assisted application security platform that combines rule-based detection with AI reasoning for SAST, SCA, and secrets detection. Their platform helps organizations automate, manage, and enforce security across development workflows, including scanning and fixing AI-generated code. Semgrep serves developers, startups, and various industries like Fintech and SaaS & Cloud.
Listed competitors
Snyk is a developer security platform that helps software teams find and fix vulnerabilities in code, open source dependencies, containers, and cloud infrastructure.
Automated code quality and security analysis platform for developers and organizations.
Leading application security provider with a comprehensive cloud-native platform for securing development lifecycles.
Also in this space
A developer-friendly testing framework for the modern web.
Shares Developer Tools, CI/CD
Application security and development platform providing deep code analysis and runtime intelligence.
Shares Cybersecurity, DevSecOps
Precise open source security solution leveraging runtime application context.
Shares Cybersecurity, Open Source
Application Security Posture Management platform that reduces risk by analyzing evolving application architectures.
Shares Cybersecurity, Application Security
Mend.io provides application security and open-source software management solutions to help organizations reduce risk and accelerate development.
Shares Open Source, Cybersecurity
ARMO provides an open-source Kubernetes security platform, Kubescape, for end-to-end security from development to production.
Shares Open Source, Cybersecurity
Key facts
- Website
- semgrep.dev
- Headquarters
- San Francisco, United States
- Employees
- 273
- Total funding
- $30M (Series A)
- Business model
- B2B
Funding rounds
| Date | Round | Amount | Lead investors |
|---|---|---|---|
| 1 Mar 2023 | Series A | $20M | Index Ventures |
| 20 Apr 2021 | Seed | $10M | Another VC |
Tech stack
Detected on semgrep.dev, last scanned 17 Oct 2026. Run your own scan
- Frontend
- Tailwind CSS, Bootstrap
- Analytics
- Google Tag Manager
- SEO
- Bitly
- Observability
- FullStory
- CDN
- AWS CloudFront, Netlify
- Email provider
- Google Workspace
- Cookie consent
- OneTrust
- Status page
- Statuspage
- Affiliate program
- Self-hosted affiliate
Semgrep scores 77. Does yours?
That is its Ahrefs DR: the backlink strength of a domain, on the Ahrefs 0 to 100 scale. Paste your website and you get yours in about a minute.
5 reviews from Reddit gathered in one place
Semgrep's default rules were decent but not impressive on their own. The value showed up after I wrote 2 custom rules for how this codebase "should" be written, and then it caught several cross-file auth flaws that Bandit missed.
Since updating to Antigravity 2.0 then moving back to the IDE, it keeps spawning hundreds of semgrep-core-proprietary processes, and using all 24GB of memory and then freezing my MacBook? Has anyone else had this issue and found a fix for i…
We have been using Semgrep for SAST and like the developer experience, the custom rules are flexible and it plugs into our workflow cleanly. But the SCA coverage is limited and there is no real correlation layer between what Semgrep finds a…
I know a lot of people recommend the free version of Semgrep, Snyk, Aikido Security, and some others. But I also heard people say that these tools are not really adequate for production applications, which I understand free tools have limit…
our entire static analysis stack - SonarQube, Semgrep, and a $35k/year Checkmarx enterprise license - found nothing. what happened is: // POST /webhooks/stripe async function handlePaymentSuccess(req, res) { const event = req.body; const se…
Each quote is copied word for word and links to where it was posted. Promotion and off-topic posts are filtered out.
Frequently asked
How much funding has Semgrep raised?
Semgrep has raised a total of $30M in funding. The most recent round on record is Series A.
How many employees does Semgrep have?
Semgrep has approximately 273 people on record.
Does Semgrep have an affiliate program?
Yes, Semgrep has an affiliate program. The program runs on Self-hosted affiliate. Register here: semgrep.dev/affiliates
Public record
SEC filings, insider activity, nonprofit links and pay benchmarks for Semgrep


