--- title: Semgrep Reviews meta\_title: 'Semgrep Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 56 reviews by the users' company size, role or industry to find out how Semgrep works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 56 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### Semgrep Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [(16 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [(14 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [(13 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [(7 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [(6 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of Semgrep ##### 1. Ease of Use Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [ See 16 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 2. Features Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [ See 14 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Nagaraju A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nagaraju A.") NA Nagaraju A. Mid-Market (51-1000 emp.) 5.0/5 "Easy to Use with Great Functional Testing Capabilities" What do you like about Semgrep? I appreciate how Semgrep excels in validating and QA testing capabilities, showing good efficacy in performing these tasks. The ease of use is particu ##### 3. Vulnerability Detection Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [ See 13 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Excellent Tool for Code Quality and Security." What do you like about Semgrep? It is a good tool to identify the issues and security in code which can impact the quality and security. ##### 4. Scanning Efficiency Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 5. Security Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you like about Semgrep? Semgrep offers a single platform for SAST and SCA solutions which is good, but the best part is semgrep rules they are so flexible and easy to write t ### 5 Cons or Disadvantages of Semgrep ##### 1. Not User-Friendly Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [ See 7 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 2. Limited Features Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [ See 6 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you dislike about Semgrep? Semgrep doesnt have Product wise segmentation like for organizations with multiple products you will have only projects and have to use labels to cate ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Small-Business (50 or fewer emp.) 4.5/5 "Fast, Accurate, and Seamless Integration with GitHub" What do you dislike about Semgrep? Semgrep is quite narrowly focused, concentrating primarily on security and lacking built-in scanning capabilities for other important areas such as se ##### 3. Difficult Learning Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 4. Lack of Guidance Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you dislike about Semgrep? Governance overhead at scale; maintaining org‑wide rule sets, exceptions, and updates across many repos becomes an operational burden without a dedica ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 5. Learning Curve Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id AJ Avneesh J. Engineering manager-DevOps Enterprise (\> 1000 emp.) 10/28/2025 "Effortless Code Scanning—Much Easier Than Our Old Tool" 5/5 What do you like best about Semgrep? It's a very user-friendly tool for scanning code repositories, and I find it much easier to use compared to our previous Checkmarx scan. Its quiet easy to integrate with our existing code repository and can also be filtered based on the need. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Since we have only recently started using this tool, there is nothing we dislike about it so far. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Its helping to find out the vulnerability with open-source softwares and implemented in our pipelines for code deployment has helped us a lot to proactively finding out the vulnerability before reaching of any environment. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Mahmoud H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mahmoud H.") MH Mahmoud H. Information Security Intern Mid-Market (51-1000 emp.) 9/16/2025 "I think Semgrep is a must have for every Software Company" 4.5/5 What do you like best about Semgrep? The fact that it can scan dependencies and has so many rules configured on the spot, with a very friendly and easy to use UI for the SemGrep pro. Review collected by and hosted on G2.com. What do you dislike about Semgrep? I think what semgrep needs is a feature that summarizes the overall security standing of a repository/project. And to allow the user to be able to tell the platform the links between different repos/ if there are any. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? I am a security official in a company with over 300 repos. The fact that semgrep can seamlessly scan all lines of code with each change is amazing for me. It makes my work so much easier. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Nitish U.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nitish U.") NU Nitish U. Product Security Lead Computer & Network Security Mid-Market (51-1000 emp.) 4/13/2026 "Accurate Results and a Polished UI from Semgrep" 4.5/5 What do you like best about Semgrep? Accuracy, UI. Semgrep AI assistant. Semgrep SCA reachability matrix Review collected by and hosted on G2.com. What do you dislike about Semgrep? Bugs, Crashes. Frequent issues in PR scans. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? SAST, Code Review, Supply Chain issues Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Mid-Market (51-1000 emp.) 9/12/2025 "Enhancing Security with Semgrep" 4/5 What do you like best about Semgrep? Since it runs fast and integrates directly into CI/CD, my team can surface issues early — from insecure function use to misconfigured patterns — before they ever hit production. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Filter limitations and changing some settings at the global level using UI. Having more advanced filtering and project-level controls would make it easier to manage findings across different environments, prioritize risks. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? The biggest benefit for us is automation and consistency. By integrating Semgrep into CI/CD pipelines, I can enforce secure coding practices at scale and ensure that every pull request is checked for common vulnerabilities. This reduces reliance on manual reviews, lowers the chance of critical bugs slipping into production, and frees me up to focus on more complex security work like pentesting and cloud security design. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite SJ Siddhesh J. Senior Security Analyst & Consultant Information Technology and Services Mid-Market (51-1000 emp.) 9/8/2025 "Fast and positive results" 4.5/5 What do you like best about Semgrep? There are multiple things which is great in the SemGrep tool, 1st easy integration with GSM and CI-CD pipeline, 2nd is easy terminal based code scan which save lot of time and intergration if Code is small. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Not specific as such, since everything is good in right price. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? compare to other tools, it is giving better, faster and accurate results in output, also tool suggestion and fix feature would be helpful for long lengthy code. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Andrew K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Andrew K.") AK Andrew K. Systems Administrator Enterprise (\> 1000 emp.) 10/21/2025 "Effortless Code Scanning, But Dynamic Issues Can Slip Through" 2.5/5 What do you like best about Semgrep? Our company has it automatically enabled to scan our code. We can click a link and see what items need to be addressed. I get a review of my code every commit. Review collected by and hosted on G2.com. What do you dislike about Semgrep? I can hide security issues with dynamically loaded variables and methods Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Security issues that might have flown under the radar Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") EC Verified User in Computer Software Small-Business (50 or fewer emp.) 9/9/2025 "Hands-off setup could not be easier" 4.5/5 What do you like best about Semgrep? Very little had to be done on our end to set up managed scans for the entire GitHub organization. Aside from Semgrep staff adjusting things to get a scan to complete, or large codebase was running SAST scans in a few days. Github PR comments show users what to do, and AI can classify many reports correctly as not needing mitigation. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Semgrep's features are designed around preventing new problems from being introduced in pull requests, but those same features are not available for issues found on trunk branches - these have to be dealt with manually. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Identifying potential security flaws in existing code as part of compliance for security certifications. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Organic Review from User Profile ![Verified User in Semiconductors](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Semiconductors") US Verified User in Semiconductors Enterprise (\> 1000 emp.) 10/21/2025 "Insightful Vulnerability Analysis, But Needs Automatic Analysis" 5/5 What do you like best about Semgrep? The tool provides an analysis of detected vulnerabilities in the code and also offers suggested fixes. This feature is helpful for identifying potential issues and understanding how to address them. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Currently, I have to manually trigger the analysis each time a new detection occurs, but I would prefer if the analysis happened automatically as soon as something is detected. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? This tool has been useful in identifying security issues within my code. It helps me catch vulnerabilities that I might have otherwise missed. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in International Affairs](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in International Affairs") UI Verified User in International Affairs Enterprise (\> 1000 emp.) 10/21/2025 "Speeds Up Bug Detection, But Rule Syntax Can Be Limiting for Complex Code" 4/5 What do you like best about Semgrep? The best thing about Semgrep is that it helps catch bugs and enforce code standards early in development, without slowing engineers down. It’s quick, understandable, and fits naturally into the developer workflow. Review collected by and hosted on G2.com. What do you dislike about Semgrep? My main dislike is that Semgrep’s rule syntax can feel restrictive when dealing with dynamic code or frameworks that rely heavily on metaprogramming. It’s great for straightforward patterns, but deeper semantic analysis sometimes needs more manual effort. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Semgrep helps catch bugs and security issues early by running fast, customizable static analysis directly in the developer workflow. It helps me maintain consistent, secure code and saves time by preventing late-stage fixes. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") UH Verified User in Hospital & Health Care Enterprise (\> 1000 emp.) 10/30/2025 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" 4.5/5 What do you like best about Semgrep? Semgrep offers a single platform for SAST and SCA solutions which is good, but the best part is semgrep rules they are so flexible and easy to write that you dont need to manually do filtering or removing. The tool has another feature I personally like is github actions that will show bugs in git itself with an AI reviewed fixed version. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Semgrep doesnt have Product wise segmentation like for organizations with multiple products you will have only projects and have to use labels to categorise those products. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It provides great SCA and SAST solutioning. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ## Top-Rated Alternatives [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![Snyk](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Snyk") Snyk 4.5/5(135) ](https://www.g2.com/products/snyk/reviews) [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,396) ](https://www.g2.com/products/github/reviews) [ View All Alternatives ](https://www.g2.com/products/semgrep/competitors/alternatives) ##### Categories on G2 [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast) [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which aviation MRO platforms have the smoothest interface for technicians with minimal tech experience?](https://www.g2.com/discussions/which-aviation-mro-platforms-have-the-smoothest-interface-for-technicians-with-minimal-tech-experience)[Most reliable CPaaS for SaaS providers](https://www.g2.com/discussions/most-reliable-cpaas-for-saas-providers)[Best-rated sales intelligence software for enterprises](https://www.g2.com/discussions/what-is-the-best-rated-sales-intelligence-software-for-enterprises) [Which Contact Center AI Observability platforms are most trusted by compliance officers in regulated industries based on user reviews?](https://www.g2.com/discussions/which-contact-center-ai-observability-platforms-are-most-trusted-by-compliance-officers-in-regulated-industries-based-on-user-reviews)[Top-rated SAP service for office supplies management](https://www.g2.com/discussions/top-rated-sap-services-for-managing-office-supplies)[Pros and Cons Details](https://www.g2.com/products/semgrep/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)