Semgrep has expanded its partnership with Replit to embed real-time security analysis into AI-native development workflows. The code security company has integrated Semgrep Guardian's secrets and credentials detection directly into Replit's newly launched Security Center. The collaboration addresses security challenges posed by AI-generated code, which can create and propagate vulnerabilities across multiple files in seconds. Traditional security reviews struggle to keep pace with AI agents that can scaffold complete applications in minutes. The integration provides inline security scanning, real-time vulnerability detection, and in-workflow remediation guidance. It leverages Replit Agent's LLM reasoning to filter out up to 93.3% of false positives from static analysis results. The expanded integration is now available to all Replit Security Center users with no additional setup required. Companies including Snowflake, Figma, Lyft, and Dropbox currently use Semgrep's security platform.

Semgrep, a code security company, has appointed Cathy Polinsky as co-CTO and VP of engineering. Polinsky brings over 20 years of engineering leadership experience from Yahoo, Salesforce, Stitch Fix, Shopify and DataGrail, including two previous CTO roles. The hire comes as AI-generated code increasingly floods enterprise codebases. Semgrep was recently selected as one of four companies for OpenAI's Trusted Access for Cyber programme. Polinsky will oversee the entire engineering organisation, including product engineering, security research and technical support. She joins co-founder and co-CTO Drew Dennison in a dual structure where Dennison leads technical vision and AI strategy whilst Polinsky scales the engineering team. Polinsky will also oversee development of Semgrep's hybrid LLM offering, which combines static analysis with AI models to detect vulnerabilities.