Semgrep

San Francisco, California, USA · ≈270 employees · semgrep.dev

Semgrep is a cybersecurity company based in San Francisco, founded in 2017. It offers a developer-first application security platform designed to help organizations identify and resolve vulnerabilities in their code efficiently. The company aims to enhance software security and reliability, making it costly to exploit software vulnerabilities. The Semgrep AppSec Platform includes both an open-source tool and a commercial enterprise solution. Key offerings include Semgrep, a static analysis tool that supports over 30 programming languages; Semgrep Code, a static application security testing solution; and Semgrep Supply Chain, which scans for dependency vulnerabilities. Additional products include Semgrep Secrets for detecting hardcoded secrets and Semgrep Multimodal, an AI-powered tool for triage and remediation. The platform integrates seamlessly into development workflows, allowing teams to ship secure code quickly. Semgrep serves development and security teams, as well as researchers, and is utilized by major technology companies like Snowflake, Figma, and Dropbox. The platform helps teams catch vulnerabilities early and reduce security backlogs effectively.

Information Technology & Services

Also: software development · security integration · security for fintech · security for containerized environments · security guardrails · security fix recommendations · static analysis · security rules sharing · false positive filtering · cybersecurity · ci/cd integration · security for open source dependencies

Funding0

Every round, secondary, debt facility or acquisition involving Semgrep that Lounge tracks, newest first.

No rounds recorded yet.

Paid members see the full deals desk — every AI round and exit, filterable by type, sector and country, with investors and reported ARR, plus CSV exports. Developer membership is $9/mo.

See plans →Log in

Semgrep

Funding0

Key numbers

Also on Lounge