Semgrep icon
Semgrep icon

Semgrep

Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...

Cost / License

  • Freemium (Subscription)
  • Open Source (LGPL-2.1)

Platforms

  • Mac
  • Windows
  • Linux
Semgrep alternatives  
1like
32alternatives
0articles

Features

  1.  Security Testing
  2.  Static Code Analysis
  3.  Static analysis

Semgrep News & Activities

Highlights All activities

Recent activities

Semgrep information

  • Developed by

    US flagr2c

  • Licensing

    Open Source (LGPL-2.1) and Freemium product.

  • Pricing

    Subscription that costs $40 per month + free version with limited functionality.

  • Written in

  • Alternatives

    32 alternatives listed

  • Badge

    Get an embeddable badge for Semgrep

  • Supported Languages

    • English

GitHub repository

  •  16,680 Stars
  •  1,058 Forks
  •  926 Open Issues
  •   Updated  
View on GitHub

Popular alternatives

View all
Semgrep was added to AlternativeTo by Paul on and this page was last updated .
No comments or reviews, maybe you want to be first?

Official Links

AppStores & Other Links

What is Semgrep?

Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or wrestling with regexes.

The Semgrep Registry has 1,000+ rules written by the Semgrep community covering security, correctness, and performance bugs. No need to DIY unless you want to.

Semgrep runs offline, on uncompiled code.

Semgrep is used in production everywhere from one-person startups to multi-billion dollar companies; it is the engine inside tools like NodeJsScan. Semgrep is developed and commercially supported by r2c, a software security company. r2c’s free hosted service, Semgrep Community, lets organizations write and share rules, and manage Semgrep in CI across many projects. r2c also offers a paid hosted tier for enterprises, Semgrep Team.