Other
Jan 2025Semgrep's licensing changes around its rules repository triggered community backlash and the launch of the OpenGrep fork, a notable open-source ecosystem risk signal.
SourceStatic analysis tool for finding bugs and enforcing code standards.
Company research
Public company, workplace, funding, and market signals
Updated Jul 29, 2026
Overview
Semgrep is a San Francisco-based software security company that builds an application security platform for scanning source code and dependencies, surfacing real vulnerabilities, and helping teams triage and fix issues faster. Its platform combines SAST, SCA, secrets detection, and newer AI-assisted detection/remediation workflows.
Primary product
Semgrep AppSec Platform
Founded
2017
Headquarters
799 Market Street, San Francisco, CA 94103, USA
Team size
201-500
Work style
Hybrid
Industry
Software Development
Sub-industry
Application Security / Static Application Security Testing (SAST)
Offices
Open Positions
18 jobs at Semgrep
Senior/Staff Security Researcher
On-siteEngineering OrgRemote - US5d ago
On-site