--- title: Semgrep Reviews meta\_title: 'Semgrep Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 56 reviews by the users' company size, role or industry to find out how Semgrep works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 56 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### Semgrep Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [(16 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [(14 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [(13 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [(12 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [(7 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [(6 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [(5 mentions)](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of Semgrep ##### 1. Ease of Use Users value the **ease of use** of Semgrep, praising its intuitive syntax and smooth CI/CD integration. [ See 16 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901393&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 2. Features Users appreciate the **intuitive pattern-matching syntax** of Semgrep, enabling effective custom rules for various programming languages. [ See 14 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1902218&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Nagaraju A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nagaraju A.") NA Nagaraju A. Mid-Market (51-1000 emp.) 5.0/5 "Easy to Use with Great Functional Testing Capabilities" What do you like about Semgrep? I appreciate how Semgrep excels in validating and QA testing capabilities, showing good efficacy in performing these tasks. The ease of use is particu ##### 3. Vulnerability Detection Users appreciate Semgrep's **effective vulnerability detection** , enabling quick identification of security issues with low false positives. [ See 13 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=1901979&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Excellent Tool for Code Quality and Security." What do you like about Semgrep? It is a good tool to identify the issues and security in code which can impact the quality and security. ##### 4. Scanning Efficiency Users value the **scanning efficiency** of Semgrep, benefiting from rapid scans and seamless CI/CD integration. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301214&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you like about Semgrep? Flexible, transparent rule engine with clear YAML syntax and data‑flow patterns, plus an extensive public registry for quick wins and customization. ##### 5. Security Users appreciate the **robust security features** of Semgrep, enabling effective identification and remediation of vulnerabilities effortlessly. [ See 12 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301279&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you like about Semgrep? I appreciate using Semgrep for its robust security scanning capabilities, particularly in our code security scans for Azure Data Factory, Azure Databr ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you like about Semgrep? Semgrep offers a single platform for SAST and SCA solutions which is good, but the best part is semgrep rules they are so flexible and easy to write t ### 5 Cons or Disadvantages of Semgrep ##### 1. Not User-Friendly Users find Semgrep **not user-friendly** , citing a steep learning curve and challenges in initial setup and customization. [ See 7 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301365&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 2. Limited Features Users note the **limited features** of Semgrep, making categorization and comprehensive analysis more challenging. [ See 6 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2300785&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Flexible Rules and GitHub Integration Shine, But Needs Better Product Segmentation" What do you dislike about Semgrep? Semgrep doesnt have Product wise segmentation like for organizations with multiple products you will have only projects and have to use labels to cate ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Small-Business (50 or fewer emp.) 4.5/5 "Fast, Accurate, and Seamless Integration with GitHub" What do you dislike about Semgrep? Semgrep is quite narrowly focused, concentrating primarily on security and lacking built-in scanning capabilities for other important areas such as se ##### 3. Difficult Learning Users find the **difficult learning** curve for custom rules in Semgrep challenging, impacting new user experiences and efficiency. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301091&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 4. Lack of Guidance Users face a **lack of guidance** in mastering rule creation and initial setup, impacting effective tool utilization. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301044&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 4.5/5 "Powerful Rule Engine and Autofix, but Governance at Scale Needs Work" What do you dislike about Semgrep? Governance overhead at scale; maintaining org‑wide rule sets, exceptions, and updates across many repos becomes an operational burden without a dedica ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ##### 5. Learning Curve Users find the **learning curve steep** for rule writing, especially for those new to static analysis tools. [ See 5 mentions ](https://www.g2.com/products/semgrep/reviews?filters%5Bsentiment_snippet%5D=2301173&qs=pros-and-cons#reviews) See Related User Reviews ![Shreekanth k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shreekanth k.") SK Shreekanth k. Enterprise (\> 1000 emp.) 5.0/5 "Streamlined Code Security with Semgrep" What do you dislike about Semgrep? The custom rule syntax took some time to learn and was not intuitive initially. Additionally, sometimes Semgrep misses complex security patterns that ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Enterprise (\> 1000 emp.) 5.0/5 "Powerful, Customizable Static Analysis with Fast Scans—Some Learning Curve and Tuning Needed" What do you dislike about Semgrep? Static analysis tools can present certain limitations, such as generating false positives that must be manually reviewed. They may also struggle to id ![Garry P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Garry P.") GP Garry P. Staff Software Engineer Mid-Market (51-1000 emp.) 12/13/2022 "Way better than any other tool \*cough\* verracode \*cough\*" 4.5/5 What do you like best about Semgrep? It's super easy to use and doesn't get in the way. The ability to create custom rules and easily ignore existing rules makes this tool standout above any of the other "static analysis" tools I've used to date. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Honestly, there isn't much I dislike. Perhaps having buttons directly interact with the github comments would be nice? Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It's solving a range of issues: \* Security checks (e.g. no open S3 bucktes) \* code quality (e.g. don't nest for loops or conditionals) \* Infra verification via terraform checks Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") CF Verified User in Financial Services Enterprise (\> 1000 emp.) 12/15/2022 "Semgrep is a plus with continuous management & tracking of open vulnerabilities." 4.5/5 What do you like best about Semgrep? Useful for tracking the open vulnerabilities, repository wise, until they're closed. I find the ability to create custom vulnerability config manually to be very useful, to extend the functionality beyond the vulnerabilities that could be picked up by existing available config templates. Review collected by and hosted on G2.com. What do you dislike about Semgrep? I think the findings could be improved. There's a limit to what static analysis tools can dig out from the code, and probably it's the limitation of technology itself, rather than semgrep. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Picking up the bad patterns in the code very early during the development cycle. There are certain coding patterns that semgrep picks up, which could be leading to deeper or critical security issues later. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 12/29/2022 "Easy to use and powerful" 4.5/5 What do you like best about Semgrep? Very easy to use, no matter which language you are using. Unlike more legacy static code analysis tools, there is no need to spend a lot of time learning rule types and syntaxes; new rules can be spun up and tested very quickly. Also, results are of high quality. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Community support is not as developed as they are pretty new. The breadth of rules and integrations is not as extensive as some other tools. However, this is improving rapidly and the rules that are present have much lesser false positives. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? We use semgrep as part of our static code analysis process. We use a combination of community and custom rules to suit our purposes. This helps us automate finding of common pattern matches to look out for. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Enterprise (\> 1000 emp.) 12/8/2022 "Semgrep helped us catch security bugs while scaling and supporting our code review processes" 5/5 What do you like best about Semgrep? Semgrep's powerful rule language and engine blends usability with flexibility. Developers being able to write their own rules in Semgrep without knowing exactly how Semgrep works has helped us scale our deployment. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Without fine-tuning, Semgrep (like any SAST) can be pretty noisy. I know they've been working on surfacing developer feedback to rule writers and maintainers, but I still wish there was a more scalable way to reduce noise (e.g. rule change suggestions based on where developers report false positives). Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? We wanted to surface information about security to developers when they needed it in code review. Semgrep is helping us do that. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") UF Verified User in Financial Services Mid-Market (51-1000 emp.) 12/8/2022 "Great community driven SAST" 5/5 What do you like best about Semgrep? We were sold on the idea that Semgrep was Python based and detections were community driven. While still providing us with the ability to write custom detections. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Nothing in particular. If anything, I'd like Semgrep to add GitHub Dependabot / Snyk like features so we can manage more controls around our source code through a single vendor. The latest Supply Chain feature is a new addition. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Our static analysis needs - especially custom controls. Previously we had developed our own SAST tool, but as the company grew, we decided to move to something commercial and more robust. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Avinash S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Avinash S.") AS Avinash S. Security Lead Mid-Market (51-1000 emp.) 12/8/2022 "No place for False Positives" 5/5 What do you like best about Semgrep? It is the most efficient and simple to use integration for SAST. Free, and community-driven Discussions on Slack channels provide valuable help and insights. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Nothing major. It is evolving in right direction. But A trial version would be good. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Mostly eliminating the use of multiple SAST scanners into one. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 12/8/2022 "Semgrep is best in class for customizability, ease of use, and support" 4/5 What do you like best about Semgrep? Semgrep makes it really easy to write rules. It's really straightforward and the UI also allows you to easily get feedback on rules as well. The dashboard is also convenient and simple to use. The customer support is also pretty amazing, in that they will help you over a meeting with issues you may have with implementation. Review collected by and hosted on G2.com. What do you dislike about Semgrep? The binary has been buggy in the past, and has required some debugging and patching to get working correctly. However, the Semgrep team was helpful with the entire process. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It's a fantastic way to get static code analysis implemented into your CI/CD pipeline. The integration hooks seamlessly into your GitHub environment and provides a clean interface for engineers to use. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") AF Verified User in Financial Services Mid-Market (51-1000 emp.) 12/9/2022 "Quick and effective SAST and Dependency Checking" 4.5/5 What do you like best about Semgrep? Super easy to implement and manage. Seamless integration into our CI pipeline, and only gets in the developers' way when it needs to. Reachability testing of depenencies is nice. Review collected by and hosted on G2.com. What do you dislike about Semgrep? Not too much to dislike. The Supply Chain/dependency scanning is new and will need more rules for reachability, but these are gradually being built. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Semgrep acts as an effective guardrail, allowing developers to write code and be guided when potential vulnerabilities are introduced. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Enterprise (\> 1000 emp.) 12/9/2022 "Good set of rules, but a bunch of false positives" 3.5/5 What do you like best about Semgrep? The upsides are that code scanning is very fast, and the ruleset is complete. Rule management on the rule board is also very easy. Integrations and webhooks are a plus. Review collected by and hosted on G2.com. What do you dislike about Semgrep? The downsides are that the number of false positives for some of the rules is enormous due to the lack of taint tracking support for PHP. Improving this ruleset, or adding taint tracking for PHP would be most helpful. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? Semgrep is helping us scan our PHP code for first-party vulnerabilities. The most tangible benefit is better coding standards. Their SCA product is also very interesting. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Biotechnology](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Biotechnology") UB Verified User in Biotechnology Mid-Market (51-1000 emp.) 12/12/2022 "Excellent tool for outlining security vulnerabilities within your application" 4/5 What do you like best about Semgrep? Great analysis of vulnerabilities with ability to review, rank and update status of each incident Review collected by and hosted on G2.com. What do you dislike about Semgrep? It would be great if Semgrep did further static analysis to cover code smells and code coverage, in addition to security. Review collected by and hosted on G2.com. What problems is Semgrep solving and how is that benefiting you? It provides insights into the security vulnerabilities within our application. Review collected by and hosted on G2.com. Show More 12/21/2022 Current UserValidated ReviewerSource: Organic ## Top-Rated Alternatives [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![Snyk](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Snyk") Snyk 4.5/5(135) ](https://www.g2.com/products/snyk/reviews) [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ View All Alternatives ](https://www.g2.com/products/semgrep/competitors/alternatives) ##### Categories on G2 [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast) [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best MDR software for small business security](https://www.g2.com/discussions/best-mdr-software-for-small-business-security)[Which audience intelligence platforms are worth using for a brand that wants to understand how their target audience compares to competitors' audiences without a full market research engagement?](https://www.g2.com/discussions/which-audience-intelligence-platforms-are-worth-using-for-a-brand-that-wants-to-understand-how-their-target-audience-compares-to-competitors-audiences-without-a-full-market-research-engagement%20)[Which CCM platform is the most user-friendly for startups](https://www.g2.com/discussions/which-ccm-platform-is-the-most-user-friendly-for-startups) [Which cloud-based capital project management systems have the strongest financial controls for a project controls team that needs audit-ready cost reporting without manual reconciliation?](https://www.g2.com/discussions/which-cloud-based-capital-project-management-systems-have-the-strongest-financial-controls-for-a-project-controls-team-that-needs-audit-ready-cost-reporting-without-manual-reconciliation%20)[best compensation management software](https://www.g2.com/discussions/need-help-what-s-the-best-compensation-management-software-solution)[Pros and Cons Details](https://www.g2.com/products/semgrep/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)