Semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
About
Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.
Open Source Health
- Stars
- 16,611
- Forks
- 1,053
- License
- LGPL-2.1
- Last commit
- 28 days ago
Related Categories
Vendor
Semgrep
Publisher of Semgrep Rules and Semgrep
Quick Links
Open Source
More by Semgrep
Related Products
Burp AI Agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Top category match
Shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Top category match
Zaproxy
The ZAP by Checkmarx Core project
Top category match
WSTG
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Top category match
WebGoat
WebGoat is a deliberately insecure application
Top category match