Semgrep is an application security platform offering AI-assisted static application security testing, software composition analysis, and secrets detection.
Products & media
A security management platform that coordinates code, dependency, and secrets scanning while enforcing rules across repositories and developer workflows.
A secrets scanning product that detects, validates, and helps remediate exposed credentials using semantic and entropy analysis.
A coding-agent plugin bundles scanning tools, hooks, and skills to check generated code and prompt fixes during development, with behavior varying by integration.
A static analysis product that detects source-code vulnerabilities and gives developers contextual findings and remediation guidance within their workflows.
A dependency security product that identifies reachable vulnerabilities and malicious packages while helping teams plan safer upgrades.
An AI analysis layer that combines model reasoning with deterministic scanning to prioritize findings and guide vulnerability remediation.
Team
Jobs
See all jobs for Semgrep here.
Funding
All fundraising announcements are based on public sources. Please contact Cosign if you believe there are any discrepancies, or claim the profile to edit.