Semgrep
Application security platform that scans code, open-source dependencies and secrets for developer and AppSec teams
Highlights
- New on EvolcAdded 2026-11-13
Recent signals
What changed at Semgrep in the last 6 months, newest first. Each line links to its public source.
- 12 Nov 2026 In the news · Semgrep launched an MCP server semgrep.dev
- 12 Nov 2026 In the news · Semgrep launched Mandoline program analysis for agents semgrep.dev
- 12 Nov 2026 In the news · Semgrep launched Guardian policies for AI detection semgrep.dev
About Semgrep
Semgrep builds an application security platform with static code analysis (SAST), software composition analysis (SCA), secrets detection and open-source malware protection. Its products include Semgrep Code, Semgrep Supply Chain, Semgrep Secrets, Semgrep Guardian for scanning AI-generated code as it is written, and an MCP server for agents. The platform runs in the CLI, CI/CD pipelines, IDEs and pull request checks on GitHub, GitLab, Bitbucket and Azure.
Customers are developers, application security teams and CISOs at software companies, including fintech and SaaS and cloud businesses. The company sells a free edition for up to 10 contributors, a Teams plan priced per contributor per month, and custom-priced Enterprise plans with on-premise source code management support.
The company's headquarters is in San Francisco, with a satellite office in New York; job listings also show offices in Boston and Denver. Semgrep supports more than 40 coding languages and reports a community rule library of 3000+ rules. It raised a $100 million Series D led by Menlo Ventures. Current openings cover engineering management, backend and full-stack engineering, AI platform and software supply chain security, along with sales, customer experience, marketing and product roles.
Product: Semgrep Code (SAST), Semgrep Supply Chain (SCA), Semgrep Secrets, Semgrep Guardian for AI-generated code, and an MCP server for agents.
Jobs at Semgrep
More cybersecurity companies
SentinelOne
AI-powered cybersecurity software for organizations' endpoints, identities, cloud workloads and AI toolsRemote-friendlyShorepointinc
Cybersecurity services for U.S. federal civilian, defense and intelligence agenciesNew on EvolcSift
Fraud prevention platform for digital businesses that scores payments, logins and sign-ups in real timeNew on EvolcRemote-friendlySimulint
Managed cybersecurity, IT, and advisory services for small and midsize businessesNew on EvolcSixGen
Cyber capability development and national security cyber operations for government and mission-focused customersNew on Evolc
Website technologies
Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.
Analytics
- Google Tag ManagerMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Integration code on pageinline script loader
- VWOMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Integration code on pageinitialization/configuration expression
- Integration code on pageinitialization/configuration expression
- Integration code on pageinitialization/configuration expression
CRM & customer data
- MarketoMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Integration code on pageinline script loader
Frontend frameworks
- BootstrapHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
Hosting
- AWSHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Response headerx-amz-cf-id
- Response headerx-amz-cf-id
- Response headerx-amz-cf-id
- NetlifyHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Response headerx-nf-request-id
- Response headerx-nf-request-id
- Response headerx-nf-request-id
Privacy & consent
- OneTrustHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
Recruiting
- AshbyHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.