Skip to content
AI SDLC Landscape
Back to the map

Semgrep

Semgrep

semgrep.dev(vendor site, opens in a new tab)
“AI-assisted SAST, SCA and secrets detection: learns your code context to cut false positives and prioritise reachable vulnerabilities.”
Claim quoted from Semgrep, semgrep.dev

Phase coverage

  1. Plan and specify: not covered
  2. Design and architecture: not covered
  3. Write code: not covered
  4. Code review: covered
  5. Test and QA: not covered
  6. Security: primary phase
  7. CI/CD and release: not covered
  8. Deploy and infrastructure: not covered
  9. Operate: not covered
  10. Maintain and modernize: not covered
  11. Code understanding and knowledge: not covered
  12. Engineering intelligence: not covered
  13. Developer portals and platform: not covered

Primary: Security. Also covers Code review.

Facts

Customers
Lyft, Slack, GitLab, HashiCorp, Figma, Plaid, Trail of Bits, Squarespace, Vanta2
Traction
AppSec teams triage 80% fewer false positives (company claim)3
Go-to-market partners
Not published
Pricing model
per contributor5
Entry price
Free6
Deployment
Not published
Models
Not published
Open source
Yes4
Compliance
Not published
Interface
cli, ci, pr-bot, web
Target buyer
appsec team, developer
Autonomy
Not published
Founded
Not published
Headquarters
Not published
Headcount
Not published
Funding total
Not published
Last round
$100M Series D, led by Menlo Ventures (Feb 2025)8

Relations

Sources

  1. 1. One-line claim

  2. 2. Customers

  3. 3. Traction

  4. 4. Open source

  5. 5. Pricing model

  6. 6. Entry price

  7. 7. Relations

  8. 8. Last round