WorthToTry
Security

Semgrep

Fast static analysis with rules that read like code

Open source

About Semgrep

Security · Freemium · Open source · 15 upvotes · Launched week 26, 2026

Semgrep scans source code with patterns written in the syntax of the language being analysed, which makes custom rules far easier to write than traditional AST queries. It covers SAST, dependency scanning and secret detection across many languages. Open-source engine under LGPL, with a paid platform for teams.

Semgrep alternatives

Other Security tools listed here, ordered by how much they overlap with Semgrep and then by upvotes. Not a ranking against Semgrep — open one and judge for yourself.

0 comments

2000 characters left · you will be asked to sign in

No comments yet. Be the first to say something.

Upvoted by

15
+3Show everyone who upvoted this