Introducing G2.ai, the future of software buying.Try now
Compare GitHub and Semgrep 
Featured Products
Sponsored
You’re seeing this ad based on the product’s relevance to this page. Sponsored content does not receive preferential treatment in any of G2’s ratings.
Codemagic
Visit Website
Sponsored
You’re seeing this ad based on the product’s relevance to this page. Sponsored content does not receive preferential treatment in any of G2’s ratings.
Endor Labs
Visit Website
Sponsored
You’re seeing this ad based on the product’s relevance to this page. Sponsored content does not receive preferential treatment in any of G2’s ratings.
Aikido Security
Visit Website
At a Glance
Market Segments
Small-Business (45.9% of reviews)
Enterprise (47.2% of reviews)
Entry-Level Pricing
$0.00 1 users
Starting at $40.00 1 contributor Per Month
GitHub
Star Rating
(2,268)4.7 out of 5
Market Segments
Small-Business (45.9% of reviews)
Pros & Cons
Entry-Level Pricing
$0.00 1 users
Browse all 3 pricing plansSemgrep
Star Rating
(54)4.6 out of 5
Market Segments
Enterprise (47.2% of reviews)
Pros & Cons
Entry-Level Pricing
Starting at $40.00 1 contributor Per Month
Free Trial is available
Learn more about SemgrepSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- Users report that GitHub excels in its Ease of Use with a score of 8.7, making it a preferred choice for small businesses, while Semgrep shines in Ease of Setup with a score of 9.6, indicating a smoother initial experience for users.
- Reviewers mention that GitHub's Quality of Support is rated at 8.7, which is solid, but Semgrep outperforms with a score of 9.2, suggesting that users find more responsive and helpful support when using Semgrep.
- G2 users highlight that GitHub has a higher Total Number of Reviews (2115) compared to Semgrep (31), indicating a more established user base and potentially more community resources, while Semgrep's smaller user base may lead to a more niche but focused community.
- Users on G2 report that GitHub's Integration capabilities score 9.1, which is impressive, but Semgrep's score of 9.0 shows it also offers strong integration options, particularly for security-focused workflows.
- Reviewers mention that GitHub's False Positives rate is rated at 8.0, which is better than Semgrep's 6.9, indicating that GitHub may provide a more reliable experience in terms of accurate issue detection.
- Users say that Semgrep's Static Code Analysis capabilities are rated at 9.2, outperforming GitHub's 8.3, suggesting that Semgrep may offer more robust tools for identifying vulnerabilities in code, which is crucial for security-conscious teams.
Pricing
Entry-Level Pricing
GitHub
Free for Individuals and Organizations
$0.00
1 users
Basics for teams and developers
- Unlimited public/private repositories
- Unlimited collaborators
- 2,000 Actions minutes/month (Free for public repositories)
Semgrep
Semgrep Code, Supply Chain, and Secrets Detection
Starting at $40.00
1 contributor Per Month
Extensible AppSec for growing teams. Choose from Code (SAST), Supply Chain (SCA), and Secrets Detection to eliminate noise out of the box, streamline developer workflows, and give security teams full visibility.
- Choose from SAST, SCA, and Secrets Detection
- Pro Rules and cross-file analysis
- AI Assistant
Free Trial
GitHub
Free Trial is available
Semgrep
Free Trial is available
Ratings
Meets Requirements
9.3
1,964
8.8
48
Ease of Use
8.7
1,980
9.1
49
Ease of Setup
9.0
591
9.4
36
Ease of Admin
8.7
451
9.1
22
Quality of Support
8.8
1,571
8.8
43
Has the product been a good partner in doing business?
8.9
387
9.6
22
Product Direction (% positive)
8.9
1,916
9.2
45
Features by Category
Administration
8.9
142
Not enough data
9.1
147
Not enough data
8.7
144
Not enough data
Functionality
8.9
145
Not enough data
8.6
134
Not enough data
8.9
136
Not enough data
9.0
147
Not enough data
8.3
133
Not enough data
Processes
9.1
146
Not enough data
8.8
144
Not enough data
8.7
142
Not enough data
Administration
9.2
48
9.0
18
9.0
47
8.2
17
Analysis
8.7
47
8.4
19
8.9
50
9.1
21
8.9
48
9.4
21
9.0
50
9.1
21
Testing
9.3
49
8.7
20
8.6
44
Feature Not Available
8.7
45
Feature Not Available
8.9
43
7.7
17
8.7
42
7.5
18
9.0
43
8.1
19
8.5
42
7.3
21
Agentic AI - Static Application Security Testing (SAST)
10.0
14
7.9
11
Dynamic Application Security Testing (DAST)Hide 13 FeaturesShow 13 Features
Not enough data
Not enough data
Administration
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
9.1
98
Not enough data
9.0
97
Not enough data
8.8
99
Not enough data
9.2
99
Not enough data
Automation
8.9
98
Not enough data
8.7
91
Not enough data
8.8
97
Not enough data
8.9
91
Not enough data
IT Management
9.0
100
Not enough data
9.0
91
Not enough data
8.9
89
Not enough data
Performance
Not enough data
8.2
12
Not enough data
8.0
11
Not enough data
8.0
11
Not enough data
9.0
10
Network
Not enough data
8.5
10
Not enough data
7.8
10
Not enough data
8.0
10
Application
Not enough data
Feature Not Available
Not enough data
8.9
11
Not enough data
8.5
11
Agentic AI - Vulnerability Scanner
Not enough data
6.9
6
Not enough data
7.5
6
Functionality
9.1
238
Not enough data
9.2
241
Not enough data
8.9
238
Not enough data
Management
9.0
236
Not enough data
8.5
231
Not enough data
9.0
239
Not enough data
Agentic AI - Continuous Delivery
9.4
29
Not enough data
9.2
29
Not enough data
9.0
29
Not enough data
9.2
30
Not enough data
9.2
29
Not enough data
Bug Reporting
8.9
191
Not enough data
8.9
188
Not enough data
9.0
192
Not enough data
Bug Monitoring
8.5
186
Not enough data
8.9
196
Not enough data
9.0
184
Not enough data
Agentic AI - Bug Tracking
9.5
26
Not enough data
9.4
26
Not enough data
9.3
26
Not enough data
Functionality - Software Composition Analysis
8.9
74
8.4
18
9.1
79
8.2
18
9.2
78
8.5
18
Effectiveness - Software Composition Analysis
8.9
76
8.5
18
9.1
78
8.3
18
8.9
76
8.3
18
Management
8.9
137
Not enough data
9.2
138
Not enough data
8.6
133
Not enough data
Functionality
8.8
136
Not enough data
8.9
136
Not enough data
8.7
134
Not enough data
Processes
8.9
137
Not enough data
8.8
134
Not enough data
9.1
139
Not enough data
Functionality
9.3
223
Not enough data
9.0
212
Not enough data
8.7
204
Not enough data
Management
8.9
217
Not enough data
8.9
213
Not enough data
8.3
208
Not enough data
Agentic AI - Continuous Integration
8.9
33
Not enough data
9.0
33
Not enough data
8.9
33
Not enough data
8.5
33
Not enough data
8.8
33
Not enough data
Documentation
8.8
185
8.9
19
8.8
179
9.3
20
8.6
170
8.2
20
Security
8.3
167
7.4
21
8.6
168
7.9
17
9.0
177
8.9
17
Agentic AI - Static Code Analysis
Not enough data
7.7
10
Not enough data
7.6
9
Not enough data
7.7
10
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Categories
Categories
Shared Categories
GitHub and Semgrep are categorized as Software Composition Analysis, Static Application Security Testing (SAST), and Secure Code Review
Unique Categories
Semgrep is categorized as AI AppSec Assistants, Static Code Analysis, Vulnerability Scanner, Interactive Application Security Testing (IAST), and Dynamic Application Security Testing (DAST)
Reviews
Reviewers' Company Size
GitHub
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Semgrep
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Computer Software
31.7%
Information Technology and Services
22.7%
Internet
6.7%
Higher Education
3.4%
Financial Services
3.2%
Other
32.2%
Information Technology and Services
24.5%
Computer Software
20.8%
Financial Services
15.1%
Manufacturing
5.7%
Semiconductors
5.7%
Other
28.3%
Discussions
What is GitHub used for?
8 Comments
MK
- store software source code
- use actions to execute CI / CD and publish artefacts / create releases
- lightweight software project managementRead more
What can GitHub be used for?
5 Comments
MS
It's a platform for version controlling. Where group of people collaborate each other and work on a single project. Read more
What does GitHub mean?
2 Comments
JV
It is a platform for doing projects based on serveral services like website development projects etcRead more
Semgrep has no discussions with answers
Hunting for software insights?
With over 3 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
