Audyense·
Añade tu producto
Semgrep

Semgrep

DevOps · semgrep.dev

Visitar sitio web ↗
¿Es tu herramienta? Reclama esta ficha →

Resumen

Semgrep is an application-security platform covering static analysis, software composition, secrets detection, and AI-assisted triage and remediation. It combines a fast scanning engine with rules, pull-request workflows, IDE support, and CI/CD integrations so developers can find and fix code and dependency risk where work already happens.

Ideal para

  • Application-security teams
  • Engineering teams adopting shift-left security
  • Organizations wanting one developer-facing AppSec platform

No encaja si

  • Non-technical compliance-only buyers
  • Teams without CI or source-control integration
  • Organizations needing a full runtime security suite

Por qué está listada

  • Strong developer-first AppSec workflow
  • Transparent entry pricing
  • Covers code, supply chain, and secrets
  • Good integration with pull-request and CI systems

Precios

Free Edition

Free

Free code and supply-chain scanning for up to 10 repositories and 10 contributors.

  • Code scanning
  • AI triage
  • Basic CI

Teams

$30 contributor/month

Choose Code, Supply Chain, or Secrets coverage with SSO and support.

  • SAST
  • SCA
  • Secrets

Enterprise

Custom pricing

Custom CI/CD, private source control, dedicated infrastructure, and support.

  • On-prem source
  • Custom integrations
  • Dedicated support

Funciones

Software composition analysisIdentifies dependency and supply-chain risk.
Pull request checksReturns findings to developer review workflows.
IDE pluginsSupports VS Code and JetBrains environments.
CI/CD integrationRuns scans in common build systems.
Custom rulesLets teams encode organization-specific patterns.
Static analysisScans source code with customizable rules.
Secrets detectionFinds secrets in code and repositories.
AI remediationAssists triage and fix generation.

Integraciones

GitHubGitLabBitbucketJenkinsCircleCIAzure DevOpsBuildkiteHackerOneSlackEmailJiraWizVS CodeJetBrains

Seguridad y cumplimiento

SOC 2 Type IIISO 27001GDPR

Pros y contras

Pros

  • Actionable developer workflow
  • Free edition supports evaluation
  • Broad CI and SCM coverage
  • Multiple AppSec modules

Contras

  • Contributor pricing scales with team size
  • Rules and tuning need ownership
  • Enterprise deployment is quote-based
  • Coverage depends on language and configuration

Qué muestra el registro

—/5
No reviews yet agregadas
G2 ↗Capterra ↗

Semgrep publishes clear plan boundaries: free scanning for small teams, Teams from $30 per contributor/month for selected security modules, and enterprise support for custom CI/CD and private deployments.

Resumen y puntuación agregados de plataformas públicas de reseñas. Enlazamos a las reseñas originales en lugar de reproducirlas — lee la fuente antes de decidir.

Reseñas de usuarios

Escritas por cuentas de Audyense · moderadas antes de publicarse

Todavía no hay reseñas de usuarios.

¿Has usado Semgrep? Sé el primero en contarles a otros compradores qué funcionó de verdad.

Compara Semgrep con

InfisicalDepotVictoriaMetrics