![]() |
VOOZH | about |
At RSA, we launched Semgrep Multimodal to combine AI reasoning with rule-based detection Learn More β
Find and fix the issues that matter in your code (SAST)
Fix vulnerabilities in open source dependencies and block malware
Find and fix hardcoded secrets with semantic analysis
Scan and fix AI-generated code the moment it's written
Combine AI reasoning with rule-based analysis for detection, triage, and remediation
Automate, manage, and enforce security across your organization
Build and deploy security pipelines that combine static analysis with AI at scale
Stay up to date on changes to the Semgrep platform, big and small
Protect against software supply chain attacks
Increase security while accelerating development
Prevent the most critical web application security risks
Protect Your Code with Secure Guardrails
Mitigate software supply chain risks
Increase security while accelerating development
Want to read all the docs? Start here
Get the latest news about Semgrep
See how Semgrep can save you time and money
Join the friendly Slack group to ask questions or share feedback
Join us at a Semgrep Event!
See why users love Semgrep
View our library of on-demand webinars
The Semgrep story & values
Join the team!
Become a Semgrep partner
Our mission is to make it expensive to exploit software.
Explore careersHow Semgrep
came to be
Founded by Drew Dennison, Isaac Evans, and Luke OβMalley in 2017, the companyβs mission has been to profoundly improve software security from day 1.
In 2020, the team reignited development of the open source project sgrep, which evolved into Semgrep, today a leading security solution used by companies like Figma, Dropbox, Slack, Snowflake, and many more.
Semgrep powers secure code development at scale, delivering proven real-world impact.
Coding languages
Plus support for CI/CD tools like GitHub and GitLab
Scans
Projects scanned every year
Community rules
Contributed by Semgrep and community members
Releases
Weekly release with new features shipped
Trusted by developers and recognized by industry leaders, our award-winning approach to secure code empowers you to innovate confidently.
Speed Run
Operate with urgency and deliver results faster than peers and expectations. We value momentum over perfection and action over hesitation.
Be Audacious
Pursue bold, high-impact work while maintaining a high standard of execution and reliability. We expect both boring excellence and ambitious bets.
Users Are the Judge
Put users first and make decisions with a service mindset toward user outcomes. Success is defined by what improves for users, not what is easiest for us.
Embrace Debate
Surface concerns and engage in constructive debate. Focus on solving the problem, not protecting ego or preserving artificial harmony.
Take the Win
Recognize and accept meaningful progress, even when outcomes are imperfect. Acknowledge wins and forward motion rather than deferring satisfaction indefinitely.
Growth-minded
We have not reached our limits. We emphasize growth and learning, and donβt anchor on where we are and what we can do as of today. This mindset supports our constant improvement; we know we can do more and do better tomorrow (we have not βarrivedβ yet).
Inclusive
We prioritize an environment where people are valued, respected, and included, regardless of their background or position within the organization. Accomplishing our mission demands a diverse set of perspectives, voices, and backgrounds. We value who weβve each worked hard to become. This extends to the Semgrep community.
Honesty
We won't put a price on integrity. Honesty fuels learning and is fundamental to building this enduring company.
Passionate
We are passionate about our work and mission. We have soul-in-the-game, which incentivizes us to be non-transactional and pushes us to build something truly great. What we build has part of us in it.
Humble
We root out entitlement. Everyone here does what it takes to meet the needs of our customers and the company. Arrogance and hubris interfere with growing an enduring and autonomous team. We lead primarily by influence and use authority sparingly.
Announcing an AI AppSec engineer that security researchers agree with 96% of the time
Semgrep raises $100 million Series D led by Menlo Ventures
Fueling our next chapter of growth, we raised $100M in Series D funding, led by Menlo Ventures and backed by all our steadfast investors.
Read more from Menlo VenturesJoin and help shape the future of software analysis and security.
See open roles