Semgrep

Application security platform with AI-assisted SAST, SCA, and secrets detection

Semgrep is an application security platform that scans source code to find vulnerabilities. It includes Semgrep Code (SAST), Semgrep Supply Chain (SCA with reachability analysis, SBOMs, and license compliance), Semgrep Secrets (secrets detection with validation), Semgrep Guardian (scans AI-generated code), and Semgrep Multimodal (AI-powered detection, triage, and remediation). The open-source Community Edition engine runs locally via the semgrep CLI; the commercial platform manages findings, policies, and integrations. Integrates with GitHub, GitLab, Bitbucket, Azure, Jira, IDEs (VS Code, JetBrains), CI/CD, and MCP-compatible AI tools, and exposes REST APIs.

Category: Security
Pricing: freemium · from $30/month/contributor
Free tier: yes
API: yes
MCP server: yes
SDK: no
Open source: yes

#sast #sca #secrets-detection #static-analysis #supply-chain-security #open-source-core #ai-triage

Alternatives to Semgrep →

Listed 2026-10-21 · last verified 2026-10-21 · extracted by @cf/zai-org/glm-5.3-flash · confidence 0.95

Your product? Claim this listing · Report a problem · Badge

API

curl https://toolgrep.com/api/products/semgrep