Semgrep

Lightweight static analysis for finding bugs and vulnerabilities

About Semgrep

Semgrep is a fast static analysis tool that searches code with patterns that look like the code itself, making custom rules easy to write. It detects security vulnerabilities, bugs and policy violations across many languages and runs in CI or as a managed platform. Security teams value Semgrep for precise, low-noise scanning

Semgrep key facts

Category: Developer Tools
Pricing: Freemium — a free tier lets you start, and paid plans are available if you need more.
Focus areas: static analysis, security, sast, open source
Official site: semgrep.dev

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside Semgrep, it includes StackHawk, Windmill, Redocly, Browserless.

FreemiumDeveloper Toolsstatic-analysissecuritysastopen-source

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: StackHawk — API and application security testing for developers; Windmill — Open-source developer platform for scripts and workflows; Redocly — API documentation and governance tooling.