Value proposition

Semgrep is a code scanning platform for finding first and third-party security vulnerabilities in your code base.

We’re Semgrep, a software security company. Our mission is to profoundly improve software security and reliability to safeguard human progress.


We maintain Semgrep, a tool to find bugs and reachable dependency vulnerabilities in code. Semgrep lets you enforce your code standards on every commit. With 2,000+ existing rules and simple-to-create custom ones, it finds the bugs that matter.

Semgrep can run anywhere: in CI, your editor, or the command-line. Plus, with dedicated infrastructure from Semgrep, Inc., it’s easy to deploy, manage, and monitor Semgrep at scale.

Semgrep is made with ♥ by Semgrep, Inc. We’re hiring: https://go.semgrep.dev/careers