Semgrep provides a security scanning tool that helps software teams identify vulnerabilities in code before production. It works by analyzing code with Semgrep OSS and Pro Engine and integrates into developers’ workflows and ticketing systems for actionable insights. It reduces noise by using reachability analysis to cut false positives from open-source vulnerabilities by up to 98% and achieves fast scans—average under 5 minutes with a 10-second median CI scan. Its goal is to help engineering teams ship secure software faster by continuously finding and fixing vulnerabilities during the SDLC.
Company Size
201-500
Company Stage
Series D
Total Funding
$193M
Headquarters
San Francisco, California
Founded
2017
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?