
Fast code scanner with readable rules for bugs and security flaws
Do you work on Semgrep?
This listing is unclaimed. Claim it for free to edit the details, add screenshots and reply to reviews.
Semgrep is a static analysis tool that scans source code for bugs, security issues and violations of team standards. Its open-source engine uses rules that read like the code they match, so developers can write their own checks in minutes. The commercial platform adds supply-chain scanning, secrets detection and AI-assisted triage, and reports findings straight into pull requests and CI. Application security teams use it to enforce policy without slowing builds. The core scanner is free and open source.
From people who have used it. One review per person, checked by a human.
No reviews yet. Be the first to say something useful.