Semgrep

Static analysis platform with an AI assistant that triages findings and posts remediation guidance on pull requests.

Semgrep pairs an open source static analysis engine with a hosted platform. Semgrep Assistant applies AI on top of rule-based findings to filter false positives, flag issues such as broken access control, and post tailored remediation guidance in pull request comments. It learns from a team's triage decisions over time.

Category

Security-focused review

Integrations

GitHub, GitLab, Bitbucket, Azure DevOps, IDE, CLI, API

Deployment

SaaS + self-hosted

Pricing model

open core (open source)

Founded

2017

Funding

$53M Series C in 2023; roughly $200M raised in total

Outbound clicks are tokenized for directory analytics.