Shuiab S.
SS
Shuiab S.
EDA hardwarw engineer
Enterprise (> 1000 emp.)
"Clean Interface and Clear Insights, But Setup Can Be Frustrating"
4/5
What do you like best about Semgrep?

The interface is extremely clean, and all vulnerabilities are clearly highlighted. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

Setting up the system for the first time was quite frustrating, as I found myself needing assistance from the IT agent on several occasions. Review collected by and hosted on G2.com.

Verified User in Manufacturing
AM
Verified User in Manufacturing
Mid-Market (51-1000 emp.)
"Excellent Tool for Code Quality and Security."
5/5
What do you like best about Semgrep?

It is a good tool to identify the issues and security in code which can impact the quality and security. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

The UI is not as efficient. Also code setup creates some issues. Review collected by and hosted on G2.com.

Verified User in Electrical/Electronic Manufacturing
UE
Verified User in Electrical/Electronic Manufacturing
Enterprise (> 1000 emp.)
"Amazing tool"
5/5
What do you like best about Semgrep?

The tool offers all the necessary features to track and manage security vulnerabilities. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

The tool is extremely useful, with all its features working exactly as intended. Review collected by and hosted on G2.com.

Ryan M.
RM
Ryan M.
Software Application Development Engineer
Enterprise (> 1000 emp.)
"Effortless to Use and Implement—Works Perfectly!"
3/5
What do you like best about Semgrep?

Ease of usage and implementation in your github repo. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

Nothing, it has worked great for me and i have had no issues Review collected by and hosted on G2.com.

Arnau E.
AE
Arnau E.
Lead Security Engineer
Enterprise (> 1000 emp.)
"Effortless Integrations and Impressive Coverage"
5/5
What do you like best about Semgrep?

Ease of integrations, broad coverage with different types of offerings. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

Integrations could be better, a bit of manual effort required. Review collected by and hosted on G2.com.

Verified User in Computer Software
CC
Verified User in Computer Software
Small-Business (50 or fewer emp.)
"An easy to use and fun to customize SAST tool"
4.5/5
What do you like best about Semgrep?

That the SAST engine returns a very small number of false positives. And the rules are fun to write. I also like the reachability analysis of the supply chain tool so you don't get overwhelmed by false positives Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

There is no export report feature. Moreover it would be useful a toggle to tell the supply chain tool to report all the vulnerable dependencies, regardless of their reachability. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
UC
Verified User in Computer & Network Security
Enterprise (> 1000 emp.)
"Semgrep experience"
5/5
What do you like best about Semgrep?

The easy customisation, custom rule creation and fast feedback for devs Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

More products like IaC scanning or DAST, I would love to have full capabilities to scan apps Review collected by and hosted on G2.com.

Abhineet S.
AS
Abhineet S.
DevSecOps Engineer II
Mid-Market (51-1000 emp.)
"Just a right way to test and catch your code vulnerability"
4.5/5
What do you like best about Semgrep?

I like the SAST engine, it is powerful and capable alongwith less % of false positives. Apart from it, the pro and lot other built rules make it easy to integrate with any DevSecOps process. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

Currently the newer offering like SEMGREP AI and secrets manager does not add up perfectly Review collected by and hosted on G2.com.

Shivam J.
SJ
Shivam J.
QA Engineer
Information Technology and Services
Mid-Market (51-1000 emp.)
"Perfect code security analysis tool to check and eliminate vulnerabilities"
4.5/5
What do you like best about Semgrep?

The sast engine and the wholesome dashboard makes everything looks great and crisp Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

I am not satisfied with the accuracy of the integration tools with it Review collected by and hosted on G2.com.

Verified User in Computer Games
UC
Verified User in Computer Games
Mid-Market (51-1000 emp.)
"Simple yet powerful SAST & SCA"
4/5
What do you like best about Semgrep?

- Easy to integrate in CICD and custom workflows

- CLI configurations are simple

- Powerful scanning capabilities

- Supports many languages

- Reachability analysis is helpful

- Stable and reliable Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

- Doesn't handle unicode chars properly at many places, if there are unicodes in your code then semgrep can crash

- No GUI for OSS version, they should atleast provide a basic GUI for OSS version Review collected by and hosted on G2.com.