Semgrep
Open-source static analysis tool for finding bugs and security issues in code.
Free OSS / $40/dev/mo Free tier available
Try Semgrep - Category
- Security
- Pricing
- Free OSS / $40/dev/mo
- Website
- semgrep.dev
About Semgrep
Semgrep is an open-source, lightweight static analysis tool that finds bugs and enforces code standards. Write custom rules in minutes using pattern matching. Semgrep AppSec Platform adds supply chain, secrets, and AI remediation.
What you get
- Open-source SAST engine
- Custom rule authoring
- 30+ language support
- Supply chain scanning (Pro)
- Secret detection (Pro)
- CI/CD and IDE integration
Specifications
| SAST | Yes |
|---|---|
| SCA | Yes |
| Secret Scanning | Yes |
| AI Remediation | Yes |
| Open Source | Yes |
| Starting Price | Free OSS |