Semgrep

What Semgrep does

Semgrep develops an application security platform for software developers and security teams. It combines static code analysis, dependency scanning, and secrets detection with tools for reviewing findings and planning fixes. Teams can use its rule-based analysis and AI-assisted workflows within code editors, pull requests, and continuous integration pipelines. The company also maintains a community code-scanning engine and a registry of scanning rules.