G2

Milan K.

Senior Software Engineer

Mid-Market (51-1000 emp.)

7/8/2026

"Fast, Easy-to-Customize Rules That Catch Security and Code-Quality Issues Early"

4.5/5

What do you like best about Semgrep?

What I like most about Semgrep is that it makes security scanning easy to adopt without adding much overhead to the development process. The UI is clean and easy to navigate, the setup and onboarding are straightforward, and it integrates well with GitHub and CI/CD pipelines. Scans are fast, the findings are easy to understand with helpful AI-powered explanations, and customizing rules for different projects is flexible. Overall, it provides good value by helping teams catch security and code quality issues early, reducing time spent fixing problems later. Review collected by and hosted on G2.com.

What do you dislike about Semgrep?

have`t found anything like that so far in semgrep Review collected by and hosted on G2.com.

What problems is Semgrep solving and how is that benefiting you?

Semgrep helps catch security issues and code quality problems early in the development process, which reduces the chances of bugs reaching production. The interface is easy to navigate, it integrates smoothly with CI/CD pipelines and GitHub, and the scan results are fast and easy to understand. While there's some initial effort to fine-tune rules, it saves time during code reviews and provides good value by helping developers identify issues before they become expensive to fix. Review collected by and hosted on G2.com.