Semgrep scans source code for security issues with its SAST engine, checks open-source dependencies for vulnerabilities and malware, and detects hardcoded secrets. AI features help triage and fix findings. The scanning engine is open source. A free edition with cross-file analysis is available for small teams, and paid plans are priced per contributor per month. The company runs a programme for teams moving from Checkmarx or Snyk.
Categories: Security
Tags: sast, sca, secrets, open-source
Follow these steps to get started.
