Semgrep

semgrep.dev

We’re Semgrep, a software security company. Our mission is to profoundly improve software security and reliability to safeguard human progress. We maintain Semgrep, a tool to find bugs and reachable dependency vulnerabilities in code. Semgrep lets you enforce your code standards on every commit. With 2,000+ existing rules and simple-to-create custom ones, it finds the bugs that matter. Semgrep can run anywhere: in CI, your editor, or the command-line. Plus, with dedicated infrastructure from Semgrep, Inc., it’s easy to deploy, manage, and monitor Semgrep at scale.