Audyense·
Add your product
Semgrep

Semgrep

DevOps · semgrep.dev

Visit website ↗
Is this your tool? Claim this listing →

Overview

Semgrep is an application-security platform covering static analysis, software composition, secrets detection, and AI-assisted triage and remediation. It combines a fast scanning engine with rules, pull-request workflows, IDE support, and CI/CD integrations so developers can find and fix code and dependency risk where work already happens.

Best for

  • Application-security teams
  • Engineering teams adopting shift-left security
  • Organizations wanting one developer-facing AppSec platform

Not a fit if

  • Non-technical compliance-only buyers
  • Teams without CI or source-control integration
  • Organizations needing a full runtime security suite

Why it’s listed

  • Strong developer-first AppSec workflow
  • Transparent entry pricing
  • Covers code, supply chain, and secrets
  • Good integration with pull-request and CI systems

Pricing

Free Edition

Free

Free code and supply-chain scanning for up to 10 repositories and 10 contributors.

  • Code scanning
  • AI triage
  • Basic CI

Teams

$30 contributor/month

Choose Code, Supply Chain, or Secrets coverage with SSO and support.

  • SAST
  • SCA
  • Secrets

Enterprise

Custom pricing

Custom CI/CD, private source control, dedicated infrastructure, and support.

  • On-prem source
  • Custom integrations
  • Dedicated support

Features

Software composition analysisIdentifies dependency and supply-chain risk.
Pull request checksReturns findings to developer review workflows.
IDE pluginsSupports VS Code and JetBrains environments.
CI/CD integrationRuns scans in common build systems.
Custom rulesLets teams encode organization-specific patterns.
Static analysisScans source code with customizable rules.
Secrets detectionFinds secrets in code and repositories.
AI remediationAssists triage and fix generation.

Integrations

GitHubGitLabBitbucketJenkinsCircleCIAzure DevOpsBuildkiteHackerOneSlackEmailJiraWizVS CodeJetBrains

Security & compliance

SOC 2 Type IIISO 27001GDPR

Pros & cons

Pros

  • Actionable developer workflow
  • Free edition supports evaluation
  • Broad CI and SCM coverage
  • Multiple AppSec modules

Cons

  • Contributor pricing scales with team size
  • Rules and tuning need ownership
  • Enterprise deployment is quote-based
  • Coverage depends on language and configuration

What the record shows

—/5
No reviews yet aggregated
G2 ↗Capterra ↗

Semgrep publishes clear plan boundaries: free scanning for small teams, Teams from $30 per contributor/month for selected security modules, and enterprise support for custom CI/CD and private deployments.

Summary and score aggregated from public review platforms. We link to original reviews rather than reproducing them — read the source before deciding.

User reviews

Written by Audyense accounts · moderated before publishing

No user reviews yet.

Used Semgrep? Be the first to tell other buyers what actually worked.

Compare Semgrep with

InfisicalDepotVictoriaMetrics