Semgrep is an application security platform offering AI-assisted static application security testing, software composition analysis, and secrets detection.

Products & media

Semgrep AppSec Platform

A security management platform that coordinates code, dependency, and secrets scanning while enforcing rules across repositories and developer workflows.

Semgrep Secrets

A secrets scanning product that detects, validates, and helps remediate exposed credentials using semantic and entropy analysis.

Semgrep Guardian

A coding-agent plugin bundles scanning tools, hooks, and skills to check generated code and prompt fixes during development, with behavior varying by integration.

Semgrep Code

A static analysis product that detects source-code vulnerabilities and gives developers contextual findings and remediation guidance within their workflows.

Semgrep Supply Chain

A dependency security product that identifies reachable vulnerabilities and malicious packages while helping teams plan safer upgrades.

Semgrep Multimodal

An AI analysis layer that combines model reasoning with deterministic scanning to prioritize findings and guide vulnerability remediation.

Team

3 people across company lists

Current Affiliates

1 person

List

Previous Affiliates

2 people

List

Jobs

Funding

All fundraising announcements are based on public sources. Please contact Cosign if you believe there are any discrepancies, or claim the profile to edit.

Leads

Participating Firms

Angels