# Semgrep

> Semgrep is a San Francisco application-security company that builds a unified AppSec platform (Code/SAST, Supply Chain/SCA, and Secrets) used by engineering teams at Dropbox, Figma, Snowflake and others. Born out of an open-source tool originally written at Facebook, it lets security teams write code-like rules and ship them through CI - cutting false positives and pushing fixes back to developers.

- **Founded:** 2017
- **Headquarters:** San Francisco, California, United States
- **Founders:** Isaac Evans (Co-founder & CEO), Drew Dennison (Co-founder & CTO), Luke O'Malley (Co-founder & CPO)
- **Team size:** ~250
- **Products:** Semgrep Code (SAST), Semgrep Supply Chain (SCA), Semgrep Secrets, Semgrep AppSec Platform, Semgrep CE (open source)
- **Notable:** 14,000+ stars on the open-source Semgrep CLI, Adopted by Dropbox, Figma, Snowflake, GitLab, Block, Headspace, $193M total raised across five rounds

## Products & services

- **Semgrep Code (SAST)** — Static application security testing that scans source code for vulnerabilities using customizable, pattern-based rules across 30+ languages.
- **Semgrep Supply Chain (SCA)** — Reachability-based dependency scanner that flags vulnerable open-source libraries actually called by your code.
- **Semgrep Secrets** — Secrets detection that validates leaked credentials against live services to prioritize active risks.
- **Semgrep AppSec Platform** — Unified SaaS console combining Code, Supply Chain, and Secrets with a shared policy engine and AI assistant.
- **Semgrep CE (open source)** — Free, lightweight CLI for pattern-based code scanning; the open-source core that powers the commercial platform.

## Achievements

- 14,000+ stars on the open-source Semgrep CLI
- Adopted by Dropbox, Figma, Snowflake, GitLab, Block, Headspace
- $193M total raised across five rounds
- Open rule registry with thousands of community-contributed rules

## Latest updates

- **2025-02** — Closed $100M Series D led by Menlo Ventures to invest in AI-assisted code security.
- **2024** — Launched AI Assistant for triage and autofix across the AppSec Platform.
- **2023-04** — Raised $53M Series C at a reported $395M valuation.

## Links

- Website: https://semgrep.dev
- LinkedIn: https://www.linkedin.com/company/semgrep
- Twitter/X: https://twitter.com/semgrep
- GitHub: https://github.com/semgrep/semgrep

---

Profile page: https://yespress.io/semgrep
Published by YesPress — https://yespress.io
Last updated: 2026-05-18