Semgrep

Security scanning

About Semgrep

Static analysis with rules you can read and write, covering code, dependencies and secrets, with AI help to triage findings.

Details

  • Free plan or free version

    Yes

  • Open source

    Yes

Not enough info yet on can run on your own servers or machine, works in VS Code, works in JetBrains IDEs. Check the tool's own site.

Listing written by CodeBan, checked 2026-11-03. Report a correction or request removal. Back to security scanning.

More tools in security scanning

Snyk

Security platform that scans code, open-source dependencies, containers and infrastructure code, with AI-suggested fixes.

  • Free plan or free version
  • Works in VS Code
  • Works in JetBrains IDEs

GitHub Advanced Security

by GitHub

GitHub's code scanning, secret scanning and dependency review, with Copilot Autofix suggesting fixes for code alerts.

Socket

Checks open-source packages for supply chain risks such as malware, install scripts and suspicious changes before you add them.

  • Free plan or free version

Checkmarx

Enterprise application security platform covering code scanning, open-source risk and API security, with AI-assisted fixes.

Aikido Security

by Aikido

Security platform for smaller teams that combines code, dependency, secret and cloud scanning, with AI used to cut false positives.

  • Free plan or free version

Mend.io

by Mend

Application security platform for open-source dependency risk, code scanning and checks on AI components in your software.