Semgrep Code

Semgrep Code is ranked #6 of 38 in static analysis tools on Freedom251. It runs on API, Browser extension, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. Paid plans start at $30/mo.

Semgrep Code plans and pricing

All plans

Free Edition Free Free Code and Supply Chain included · up to 10 repositories · maximum 10 contributors · 60 AI credits semgrep.dev · 30 Sept 2026

Teams — Code $30/mo $30/month/contributor Code (SAST) · 20 AI credits per developer per month · 500 private repositories maximum semgrep.dev · 30 Sept 2026

Enterprise Not published Custom No limit on repositories or contributors · 50 AI credits per developer per month · dedicated account manager semgrep.dev · 30 Sept 2026

Compared on static analysis tools

Free plan: Yes

Best Semgrep Code alternatives

See all 12

MATLAB Grader Free plan LinuxMacWebWin

Free6.7 CodeChecker apiextensionLinuxMacself-hosted

6.6 Infer Free plan LinuxMacself-hostedWeb

Free6.6 PMD Free plan LinuxMacself-hostedWin

Free6.6 Qodana Free plan apiLinuxMacself-hostedWeb

$5/mo6.6 Snyk Open Source Free plan apiLinuxMacWebWin

$25/mo6.6

Semgrep Code

Purpose: Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them.
Detection: Its multimodal detection combines deterministic SAST for issues such as XSS and SQL injection with AI analysis for complex flaws such as IDOR and business logic vulnerabilities.
Languages: The pricing comparison lists support for 35+ programming languages.
Triage: Semgrep says Multimodal can reduce findings requiring triage by 20% on activation and improve as it learns from triage decisions.
Remediation: The product provides tailored, step-by-step remediation instructions in pull requests.
Integrations: The integrations page lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among supported SCM and CI tools.
Developer workflow: The integrations page lists VS Code and IntelliJ IDE extensions, and Slack, email, and webhooks for notifications.
Free tier limits: The Free Edition includes Code and Supply Chain, allows scanning up to 10 repositories, and has a maximum of 10 contributors.
Paid tier limits: Teams supports up to 500 private repositories, while Enterprise has no repository or contributor limit.
Code handling: For local or fully CI-based scans, Semgrep says source code stays on the user's computer or CI environment; opting into AI processing sends part of a file containing a finding to a model.
Compliance: Semgrep's trust portal describes a SOC 2 Type II report and a full-scope third-party penetration test covering the Semgrep AppSec Platform, including Semgrep Code.
Support: The pricing page lists community-based support for Free Edition, award-winning support for Teams, and dedicated account management and tailored onboarding for Enterprise.
Founded: 2017
Founded: 2017
Price from: $30/mo

Visit site Alternatives

Where it ranks on Freedom251

Best Static Analysis Tools in 2026#6 of 38
Best SAST Tools in 2026#1 of 25
Best DevSecOps Platforms in 2026#6 of 25
Best Static Application Security Testing Software in 2026#5 of 24
Best C and C++ Static Analysis Tools in 2026#6 of 24
Best Secrets Scanning Software in 2026#6 of 23

Is Semgrep Code yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Semgrep Code

Sources

semgrep.dev/products/semgrep-code/· checked 30 Sept 2026
semgrep.dev/pricing/· checked 30 Sept 2026
semgrep.dev/products/integrations/· checked 30 Sept 2026
trust.semgrep.dev· checked 30 Sept 2026
semgrep.dev/products/semgrep-appsec-platform/· checked 23 Sept 2026
semgrep.dev/products/semgrep-secrets/· checked 28 Sept 2026