Semgrep Code

Semgrep Code is ranked #8 of 38 in static analysis tools on The Geeks Club. It runs on API, Browser extension, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. Paid plans start at $30/mo.

Semgrep Code plans and pricing

All plans

Free Edition Free Free Code and Supply Chain included · up to 10 repositories · maximum 10 contributors · 60 AI credits semgrep.dev · 30 Sept 2026

Teams — Code $30/mo $30/month/contributor Code (SAST) · 20 AI credits per developer per month · 500 private repositories maximum semgrep.dev · 30 Sept 2026

Enterprise Not published Custom No limit on repositories or contributors · 50 AI credits per developer per month · dedicated account manager semgrep.dev · 30 Sept 2026

Compared on static analysis tools

Free plan: Yes

Best Semgrep Code alternatives

See all 12

7.9 Qodana Free plan

7.8 Cppcheck Free plan

7.7 Codacy Free plan

7.7 Gitar Free plan

7.4 MATLAB Grader Free plan

7.4 Snyk Open Source Free plan

Semgrep Code

Purpose: Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them.
Detection: Its multimodal detection combines deterministic SAST for issues such as XSS and SQL injection with AI analysis for complex flaws such as IDOR and business logic vulnerabilities.
Languages: The pricing comparison lists support for 35+ programming languages.
Triage: Semgrep says Multimodal can reduce findings requiring triage by 20% on activation and improve as it learns from triage decisions.
Remediation: The product provides tailored, step-by-step remediation instructions in pull requests.
Integrations: The integrations page lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among supported SCM and CI tools.
Developer workflow: The integrations page lists VS Code and IntelliJ IDE extensions, and Slack, email, and webhooks for notifications.
Free tier limits: The Free Edition includes Code and Supply Chain, allows scanning up to 10 repositories, and has a maximum of 10 contributors.
Paid tier limits: Teams supports up to 500 private repositories, while Enterprise has no repository or contributor limit.
Code handling: For local or fully CI-based scans, Semgrep says source code stays on the user's computer or CI environment; opting into AI processing sends part of a file containing a finding to a model.
Compliance: Semgrep's trust portal describes a SOC 2 Type II report and a full-scope third-party penetration test covering the Semgrep AppSec Platform, including Semgrep Code.
Support: The pricing page lists community-based support for Free Edition, award-winning support for Teams, and dedicated account management and tailored onboarding for Enterprise.
Founded: 2017
Headquarters: San Francisco, California, United States
Price from: $30/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Static Analysis Tools in 2026#8 of 38
Best SAST Tools in 2026#2 of 25
Best DevSecOps Platforms in 2026#5 of 25
Best C and C++ Static Analysis Tools in 2026#5 of 25
Best Static Application Security Testing Software in 2026#5 of 24
Best Secrets Scanning Software in 2026#4 of 23

Is Semgrep Code yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Semgrep Code

Sources

semgrep.dev/products/semgrep-code/· checked 30 Sept 2026
semgrep.dev/pricing/· checked 30 Sept 2026
semgrep.dev/products/integrations/· checked 30 Sept 2026
trust.semgrep.dev· checked 30 Sept 2026
semgrep.dev/products/semgrep-appsec-platform/· checked 23 Sept 2026