Semgrep Code
Semgrep Code: Broad SAST coverage with pull-request, CI/CD, IDE, custom-rule, and AI-assisted workflows. Ranked #1 of 26 in SAST Tools by our editors (9.4/10); pricing: Free plan; best for teams needing broad SAST integrations.
At a glance
- Editor score9.4 / 10
- PricingFree plan
- Best forTeams needing broad SAST integrations
- Free planYes
- Paid from$30/user/mo
- Pull request scansYes
- Founded2017
- Facts checked21 Sep 2026
Where it wins
- Cross-file and cross-function taint analysis
- GitHub, GitLab, Bitbucket, CI/CD, and IDE integrations
- AI-assisted triage, remediation guidance, and fix suggestions
Where it doesn't
- Free Edition is limited to 10 repositories and 10 contributors
- Teams starts at $30 per contributor per month
- Enterprise pricing is custom
Our verdict on Semgrep Code
Semgrep Code is a static application security testing product for development and security teams. It analyzes source code with Semgrep’s Pro Engine and security rules to identify vulnerabilities, including issues that require cross-file and cross-function analysis. Findings can appear in pull requests, merge requests, IDEs, and CI/CD workflows, making it suited to organizations that want security checks embedded across development rather than limited to a separate review stage.
The pricing structure supports a small-team entry point and paid expansion. The Free Edition includes Code and Supply Chain, supports up to 10 repositories and a maximum of 10 contributors, and covers 35+ supported languages. The Teams plan is priced at $30 per contributor per month on monthly billing and adds cross-file analysis, custom rules, and CI/CD and pull-request integrations alongside 35+ supported languages. Enterprise uses custom pricing and includes on-premises source-code management support, custom CI/CD integrations, and unlimited repositories and contributors.
Integration breadth is a central part of the product’s fit. Semgrep Code connects with GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, Slack, webhooks, and a REST API, while IDE scanning is available through VS Code and IntelliJ integrations. Its security workflow also includes custom security rules, AI-assisted triage, remediation guidance, AI-generated fix suggestions, and API-triggered fixes. Teams that need broad coverage across repositories, pipelines, pull requests, and developer tools should find the feature set relevant. Organizations seeking a narrowly focused scanner or a fixed, publicly stated Enterprise price may prefer a simpler alternative.
Your product? Our editors can test Semgrep Code in depth and publish a review, labelled as paid · from $149/mo →
Semgrep Code pricing
All 3 Semgrep Code plans and prices →
Semgrep Code fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $30/user/mo |
| Analysis targets | source code |
| Languages supported | 35 |
| Pull request scans | Yes |
| IDE support | Yes |
| CI/CD integration | Yes |
| Custom security rules | Yes |
| Automated fixes | Yes |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SSO/SAML |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 13 integrations: GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure Pipelines … See all → |
| Pricing | Free plan (source) |
| Website | semgrep.dev |
| Facts checked | 21 Sep 2026 |
Semgrep Code integrations
Semgrep Code lists 13 integrations on its own site.
- GitHub
- GitLab
- Bitbucket
- Jenkins
- CircleCI
- Azure Pipelines
- Buildkite
- Slack
- Webhooks
- Jira
- VS Code
- IntelliJ
See all Semgrep Code integrations →
Alternatives to Semgrep Code
- Snyk CodeAffordable source-code SAST with pull-request, IDE, CI/CD, and automated-fix workflows.9.2
- GitHub CodeQLDeep SAST for GitHub workflows, with free public-repository scanning.9.0
- OpenText Fortify SASTBroad SAST coverage for enterprises, with sales-led pricing and extensive workflow integrations.8.8
See all Semgrep Code alternatives →
Semgrep Code vs the competition
- Semgrep Code vs Snyk Code
- Semgrep Code vs GitHub CodeQL
- Semgrep Code vs OpenText Fortify SAST
- Semgrep Code vs Veracode Static Analysis
- Semgrep Code vs Klocwork
- Semgrep Code vs DerScanner
Compare Semgrep Code with any tool side by side →
Also Ranked In
Semgrep Code is ranked in 5 of our directories.
Used Semgrep Code? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Semgrep Code for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Semgrep Code is listed in our SAST Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/semgrep-code/"><img src="https://www.itechguides.com/best/badge/semgrep-code.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update