Compare GitHub and Semgrep 
At a Glance
Market Segments
Small-Business (45.3% of reviews)
Enterprise (47.2% of reviews)
Entry-Level Pricing
$0.00 1 users
Starting at $40.00 1 contributor Per Month
GitHub
Star Rating
(2,309)4.7 out of 5
Market Segments
Small-Business (45.3% of reviews)
Pros & Cons
Entry-Level Pricing
$0.00 1 users
Browse all 3 pricing plansSemgrep
Star Rating
(54)4.6 out of 5
Market Segments
Enterprise (47.2% of reviews)
Pros & Cons
Entry-Level Pricing
Starting at $40.00 1 contributor Per Month
Free Trial is available
Learn more about SemgrepSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- G2 reviewers report that GitHub excels in collaboration features, with users praising its straightforward pull request system that keeps projects organized when multiple developers are involved. This makes it a go-to platform for managing software projects effectively.
- Users say that Semgrep stands out for its robust security scanning capabilities, particularly in environments like Azure Data Factory and Python code. Reviewers appreciate its flexible rule engine and seamless CI/CD integration, which allows for frequent scans without significant performance impact.
- According to verified reviews, GitHub's overall user satisfaction is notably high, reflected in its impressive G2 Score. Users highlight the platform's ability to combine coding, collaboration, and version control in one place, making it essential for developers.
- Reviewers mention that while Semgrep offers a user-friendly setup process, GitHub's implementation is often described as more intuitive, with users noting the ease of onboarding and the availability of extensive resources for new users.
- G2 reviewers highlight that GitHub's extensive market presence and user base contribute to a wealth of community support and resources, which can be invaluable for troubleshooting and learning, whereas Semgrep, despite its strong capabilities, has fewer reviews and a smaller community footprint.
- Users report that while Semgrep is effective for validation and QA testing, GitHub's comprehensive features and higher ratings in areas like ease of use and support make it a more favorable choice for teams looking for an all-in-one solution.
Pricing
Entry-Level Pricing
GitHub
Free for Individuals and Organizations
$0.00
1 users
Basics for teams and developers
- Unlimited public/private repositories
- Unlimited collaborators
- 2,000 Actions minutes/month (Free for public repositories)
Semgrep
Semgrep Code, Supply Chain, and Secrets Detection
Starting at $40.00
1 contributor Per Month
Extensible AppSec for growing teams. Choose from Code (SAST), Supply Chain (SCA), and Secrets Detection to eliminate noise out of the box, streamline developer workflows, and give security teams full visibility.
- Choose from SAST, SCA, and Secrets Detection
- Pro Rules and cross-file analysis
- AI Assistant
Free Trial
GitHub
Free Trial is available
Semgrep
Free Trial is available
Ratings
Meets Requirements
9.3
1,997
8.8
48
Ease of Use
8.7
2,014
9.1
49
Ease of Setup
9.0
625
9.4
36
Ease of Admin
8.7
453
9.1
22
Quality of Support
8.7
1,596
8.8
43
Has the product been a good partner in doing business?
8.9
389
9.6
22
Product Direction (% positive)
8.9
1,948
9.2
45
Features by Category
Administration
8.9
138
Not enough data
9.0
145
Not enough data
8.6
138
Not enough data
Functionality
8.9
142
Not enough data
8.5
126
Not enough data
8.8
130
Not enough data
9.0
142
Not enough data
8.1
125
Not enough data
Processes
9.0
142
Not enough data
8.7
136
Not enough data
8.6
137
Not enough data
Administration
9.0
40
9.0
18
8.8
38
8.2
17
Analysis
8.4
39
8.4
19
8.7
42
9.1
21
8.6
39
9.4
21
8.8
44
9.1
21
Testing
9.1
40
8.7
20
8.2
34
Feature Not Available
8.4
36
Feature Not Available
8.5
33
7.7
17
8.3
32
7.5
18
8.6
33
8.1
19
8.0
32
7.3
21
Agentic AI - Static Application Security Testing (SAST)
Not enough data
7.9
11
Dynamic Application Security Testing (DAST)Hide 13 FeaturesShow 13 Features
Not enough data
Not enough data
Administration
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
9.0
90
Not enough data
9.0
89
Not enough data
8.6
90
Not enough data
9.1
94
Not enough data
Automation
8.8
90
Not enough data
8.6
83
Not enough data
8.7
90
Not enough data
8.8
83
Not enough data
IT Management
8.9
93
Not enough data
8.8
84
Not enough data
8.7
79
Not enough data
Performance
Not enough data
8.2
12
Not enough data
8.0
11
Not enough data
8.0
11
Not enough data
9.0
10
Network
Not enough data
8.5
10
Not enough data
7.8
10
Not enough data
8.0
10
Application
Not enough data
Feature Not Available
Not enough data
8.9
11
Not enough data
8.5
11
Agentic AI - Vulnerability Scanner
Not enough data
6.9
6
Not enough data
7.5
6
Functionality
9.1
240
Not enough data
9.2
248
Not enough data
8.8
232
Not enough data
Management
9.0
240
Not enough data
8.4
226
Not enough data
9.0
244
Not enough data
Agentic AI - Continuous Delivery
9.0
23
Not enough data
8.7
22
Not enough data
8.5
20
Not enough data
8.7
22
Not enough data
8.7
22
Not enough data
Bug Reporting
8.9
186
Not enough data
8.8
181
Not enough data
9.0
185
Not enough data
Bug Monitoring
8.4
181
Not enough data
8.9
196
Not enough data
9.0
179
Not enough data
Agentic AI - Bug Tracking
9.0
18
Not enough data
8.9
18
Not enough data
8.6
18
Not enough data
Functionality - Software Composition Analysis
8.8
64
8.4
18
9.0
69
8.2
18
9.1
68
8.5
18
Effectiveness - Software Composition Analysis
8.7
66
8.5
18
9.0
69
8.3
18
8.8
67
8.3
18
Management
8.8
132
Not enough data
9.1
140
Not enough data
8.6
130
Not enough data
Functionality
8.8
138
Not enough data
8.9
133
Not enough data
8.6
127
Not enough data
Processes
8.9
133
Not enough data
8.8
127
Not enough data
9.1
139
Not enough data
Functionality
9.3
223
Not enough data
8.9
208
Not enough data
8.6
197
Not enough data
Management
8.8
217
Not enough data
8.8
212
Not enough data
8.2
202
Not enough data
Agentic AI - Continuous Integration
8.4
24
Not enough data
8.5
25
Not enough data
8.5
24
Not enough data
7.8
26
Not enough data
8.2
25
Not enough data
Documentation
8.7
176
8.9
19
8.7
170
9.3
20
8.5
162
8.2
20
Security
8.2
158
7.4
21
8.5
160
7.9
17
8.9
170
8.9
17
Agentic AI - Static Code Analysis
Not enough data
7.7
10
Not enough data
7.6
9
Not enough data
7.7
10
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Categories
Categories
Shared Categories
GitHub and Semgrep are categorized as Software Composition Analysis, Static Application Security Testing (SAST), and Secure Code Review
Unique Categories
Semgrep is categorized as AI AppSec Assistants, Static Code Analysis, Vulnerability Scanner, Interactive Application Security Testing (IAST), and Dynamic Application Security Testing (DAST)
Reviews
Reviewers' Company Size
GitHub
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Semgrep
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Computer Software
32.0%
Information Technology and Services
22.6%
Internet
6.6%
Higher Education
3.4%
Financial Services
3.2%
Other
32.3%
Information Technology and Services
24.5%
Computer Software
20.8%
Financial Services
15.1%
Computer & Network Security
5.7%
Semiconductors
5.7%
Other
28.3%
Discussions
What is GitHub used for?
8 Comments
MK
- store software source code
- use actions to execute CI / CD and publish artefacts / create releases
- lightweight software project managementRead more
What can GitHub be used for?
5 Comments
MS
It's a platform for version controlling. Where group of people collaborate each other and work on a single project. Read more
How is GitHub shaping the landscape of collaborative software development and version control?
4 Comments
HJ
Good Read more
Semgrep has no discussions with answers
Hunting for software insights?
With over 3 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
