Semgrep, founded in 2017 by MIT graduates, builds a static analysis platform that helps developers and security teams find bugs and enforce code standards. The company's core offering evolved from an open-source project called sgrep into a suite of commercial tools designed to integrate directly into developer workflows - within IDEs and CI/CD pipelines - rather than creating bottlenecks.
The Semgrep AppSec Platform combines three capabilities: AI-assisted static application security testing (SAST), supply chain analysis (SCA), and secrets detection. The approach prioritises accuracy over volume of findings, aiming to surface real issues rather than overwhelming teams with low-signal warnings. The tooling spans open-source and proprietary products.
Semgrep's platform is used by engineering and security teams at companies including Figma, Dropbox, Slack, Snowflake, HashiCorp, and GitLab. The company operates in the software development and application security sectors, with a stated mission of making it more costly for attackers to exploit software.
