--- title: Semgrep Reviews meta\_title: 'Semgrep Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 56 reviews by the users' company size, role or industry to find out how Semgrep works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 56 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### Semgrep Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [(16 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [(14 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [(13 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [(7 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [(6 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of Semgrep ##### 1. Ease of Use Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [ See 16 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 2. Features Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [ See 14 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Nagaraju A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nagaraju A.") NA Nagaraju A. Mid-Market (51-1000 emp.) 5.0/5 "Easy to Use with Great Functional Testing Capabilities" What do you like about Semgrep? I appreciate how Semgrep excels in validating and QA testing capabilities, showing good efficacy in performing these tasks. The ease of use is particu ##### 3. Vulnerability Detection Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [ See 13 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Excellent Tool for Code Quality and Security." What do you like about Semgrep? It is a good tool to identify the issues and security in code which can impact the quality and security. ##### 4. Scanning Efficiency Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 5. Security Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you like about Semgrep? Semgrep offers a single platform for SAST and SCA solutions which is good, but the best part is semgrep rules they are so flexible and easy to write t ### 5 Cons or Disadvantages of Semgrep ##### 1. Not User-Friendly Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [ See 7 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 2. Limited Features Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [ See 6 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you dislike about Semgrep? Semgrep doesnt have Product wise segmentation like for organizations with multiple products you will have only projects and have to use labels to cate ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Small-Business (50 or fewer emp.) 4.5/5 "Fast, Accurate, and Seamless Integration with GitHub" What do you dislike about Semgrep? Semgrep is quite narrowly focused, concentrating primarily on security and lacking built-in scanning capabilities for other important areas such as se ##### 3. Difficult Learning Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 4. Lack of Guidance Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you dislike about Semgrep? Governance overhead at scale; maintaining org‑wide rule sets, exceptions, and updates across many repos becomes an operational burden without a dedica ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 5. Learning Curve Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ![Shuiab S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shuiab S.") SS Shuiab S. EDA hardwarw engineer Enterprise (\> 1000 emp.) 10/21/2025 "Clean Interface and Clear Insights, But Setup Can Be Frustrating" 4/5 What do you like best about Semgrep? The interface is extremely clean, and all vulnerabilities are clearly highlighted. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Setting up the system for the first time was quite frustrating, as I found myself needing assistance from the IT agent on several occasions. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? This tool was useful in identifying vulnerabilities within the code and assisted in resolving issues that appeared in production. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Verified User in Manufacturing](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Manufacturing") AM Verified User in Manufacturing Mid-Market (51-1000 emp.) 10/22/2025 "Excellent Tool for Code Quality and Security." 5/5 What do you like best about Semgrep? It is a good tool to identify the issues and security in code which can impact the quality and security. Review collected by and hosted on G2.com. What do you dislike about Semgrep? The UI is not as efficient. Also code setup creates some issues. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? This product is excellent when it comes to handling. I am quite satisfied with how well it manages tasks. Review collected by and hosted on G2.com. Show More 10/23/2025 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Electrical/Electronic Manufacturing](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Electrical/Electronic Manufacturing") UE Verified User in Electrical/Electronic Manufacturing Enterprise (\> 1000 emp.) 9/25/2025 "Amazing tool" 5/5 What do you like best about Semgrep? The tool offers all the necessary features to track and manage security vulnerabilities. Review collected by and hosted on G2.com. What do you dislike about Semgrep? The tool is extremely useful, with all its features working exactly as intended. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Semgrep highlights all the security issues present in the tools and also offers solutions for each of them. Additionally, it provides explanations to help understand the problems and the recommended fixes. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Ryan M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ryan M.") RM Ryan M. Software Application Development Engineer Enterprise (\> 1000 emp.) 10/21/2025 "Effortless to Use and Implement—Works Perfectly!" 3/5 What do you like best about Semgrep? Ease of usage and implementation in your github repo. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Nothing, it has worked great for me and i have had no issues Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It his helping in vulnerability scanning. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Arnau E.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arnau E.") AE Arnau E. Lead Security Engineer Enterprise (\> 1000 emp.) 10/21/2025 "Effortless Integrations and Impressive Coverage" 5/5 What do you like best about Semgrep? Ease of integrations, broad coverage with different types of offerings. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Integrations could be better, a bit of manual effort required. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? SAST, Secrets, SCA. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") CC Verified User in Computer Software Small-Business (50 or fewer emp.) 12/4/2024 "An easy to use and fun to customize SAST tool" 4.5/5 What do you like best about Semgrep? That the SAST engine returns a very small number of false positives. And the rules are fun to write. I also like the reachability analysis of the supply chain tool so you don't get overwhelmed by false positives Review collected by and hosted on G2.com. What do you dislike about Semgrep? There is no export report feature. Moreover it would be useful a toggle to tell the supply chain tool to report all the vulnerable dependencies, regardless of their reachability. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Helping to build secure products by writing more secure code Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") UC Verified User in Computer & Network Security Enterprise (\> 1000 emp.) 12/4/2024 "Semgrep experience" 5/5 What do you like best about Semgrep? The easy customisation, custom rule creation and fast feedback for devs Review collected by and hosted on G2.com. What do you dislike about Semgrep? More products like IaC scanning or DAST, I would love to have full capabilities to scan apps Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Shifting left vulnerabilities Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Abhineet S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhineet S.") AS Abhineet S. DevSecOps Engineer II Mid-Market (51-1000 emp.) 2/20/2024 "Just a right way to test and catch your code vulnerability" 4.5/5 What do you like best about Semgrep? I like the SAST engine, it is powerful and capable alongwith less % of false positives. Apart from it, the pro and lot other built rules make it easy to integrate with any DevSecOps process. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Currently the newer offering like SEMGREP AI and secrets manager does not add up perfectly Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It is catching the essential, critical and tainted in nature vulnerabilities in day to day code making it is good way to follow shift left practices. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 Icon 9/10/2024 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Shivam J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shivam J.") SJ Shivam J. QA Engineer Information Technology and Services Mid-Market (51-1000 emp.) 2/20/2024 "Perfect code security analysis tool to check and eliminate vulnerabilities" 4.5/5 What do you like best about Semgrep? The sast engine and the wholesome dashboard makes everything looks great and crisp Review collected by and hosted on G2.com. What do you dislike about Semgrep? I am not satisfied with the accuracy of the integration tools with it Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Making it easy to go shift left in security and in supply chain management security Review collected by and hosted on G2.com. Show More 9/25/2024 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Games](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Games") UC Verified User in Computer Games Mid-Market (51-1000 emp.) 11/7/2023 "Simple yet powerful SAST & SCA" 4/5 What do you like best about Semgrep? - Easy to integrate in CICD and custom workflows - CLI configurations are simple - Powerful scanning capabilities - Supports many languages - Reachability analysis is helpful - Stable and reliable Review collected by and hosted on G2.com. What do you dislike about Semgrep? - Doesn't handle unicode chars properly at many places, if there are unicodes in your code then semgrep can crash - No GUI for OSS version, they should atleast provide a basic GUI for OSS version Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Semgrep is helping us identify vulnerabilities at the early stages of the development by continously identifying the vulnerabilities in our codebase and highlighting the vulnerable OSS libraries being used. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ## Top-Rated Alternatives [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![Snyk](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Snyk") Snyk 4.5/5(135) ](https://www.g2.com/products/snyk/reviews) [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ View All Alternatives ](https://www.g2.com/products/semgrep/competitors/alternatives) ##### Categories on G2 [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast) [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best MDR software for small business security](https://www.g2.com/discussions/best-mdr-software-for-small-business-security)[Which audience intelligence platforms are worth using for a brand that wants to understand how their target audience compares to competitors' audiences without a full market research engagement?](https://www.g2.com/discussions/which-audience-intelligence-platforms-are-worth-using-for-a-brand-that-wants-to-understand-how-their-target-audience-compares-to-competitors-audiences-without-a-full-market-research-engagement%20)[Which CCM platform is the most user-friendly for startups](https://www.g2.com/discussions/which-ccm-platform-is-the-most-user-friendly-for-startups) [Which cloud-based capital project management systems have the strongest financial controls for a project controls team that needs audit-ready cost reporting without manual reconciliation?](https://www.g2.com/discussions/which-cloud-based-capital-project-management-systems-have-the-strongest-financial-controls-for-a-project-controls-team-that-needs-audit-ready-cost-reporting-without-manual-reconciliation%20)[best compensation management software](https://www.g2.com/discussions/need-help-what-s-the-best-compensation-management-software-solution)[Pros and Cons Details](https://www.g2.com/products/semgrep/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)