Semgrep Secrets
Semgrep Secrets: A flexible secrets scanner for teams that need semantic and custom detection. Ranked #12 of 24 in Secrets Scanning Software by our editors (8.1/10); pricing: Paid; best for teams wanting semantic and custom detection.
At a glance
- Editor score8.1 / 10
- PricingPaid
- Best forTeams wanting semantic and custom detection
- Free planNo
- Paid from$15/user/mo
- CI/CD scanningYes
- Founded2017
- Facts checked22 Sep 2026
Where it wins
- Combines semantic, entropy, regex, and service validation
- Supports custom detection rules and HTTP/HTTPS validators
- Covers hooks, CI/CD, pull requests, IDEs, and triage
Where it doesn't
- No free plan is available
- Historical scanning is listed as a beta feature
- Unlimited repositories and contributors require Enterprise
Our verdict on Semgrep Secrets
Semgrep Secrets scans source code for hardcoded secrets, API keys, and other sensitive data. It is aimed at development and security teams that want detection embedded in everyday engineering workflows rather than limited to a standalone scan. Coverage includes semantic analysis, entropy analysis, regex-based detection, and validation against corresponding services. Teams can also define custom secret-detection rules and custom HTTP/HTTPS validators for internal services.
The Teams — Secrets plan costs $15 per contributor per month with monthly billing. Its published features include semantic and entropy analysis, secret validation, historical scanning in beta, and a pre-commit hook. The product also supports pull-request and merge-request comments, findings triage and export, and scanning through CI/CD pipelines. Enterprise adds on-premises source-code management support, custom CI/CD integrations, unlimited repositories, and unlimited contributors. There is no free plan, so teams should account for contributor-based pricing when evaluating adoption across larger engineering groups.
Semgrep Secrets fits organizations working across GitHub, GitLab, Bitbucket, or Azure, with additional integrations for Jenkins, CircleCI, Buildkite, Slack, email, webhooks, VS Code, and IntelliJ. Its web, API, and self-hosted options support varied delivery models, while pre-commit hooks and pull-request comments bring findings closer to code changes. Semgrep says validation runs locally within the customer’s infrastructure and that secrets are not sent to its servers. Choose it when semantic detection, custom rules, validators, and broad workflow coverage matter. Teams seeking a free entry tier or a narrowly focused scanner may prefer a simpler alternative.
Your product? Our editors can test Semgrep Secrets in depth and publish a review, labelled as paid · from $149/mo →
Semgrep Secrets pricing
All 2 Semgrep Secrets plans and prices →
Semgrep Secrets fact sheet
| Free plan | No |
|---|---|
| Paid from | $15/user/mo |
| Supported VCS | GitHub, GitLab, Bitbucket, Azure DevOps |
| CI/CD scanning | Yes |
| Pre-commit scanning | Yes |
| Pull-request scanning | Yes |
| Push protection | Not verified |
| Custom detection rules | Yes |
| Repository limit | 500 repositories |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SSO/SAML |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 12 integrations: GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, CircleCI … See all → |
| Pricing | Paid (source) |
| Website | semgrep.dev |
| Facts checked | 22 Sep 2026 |
Semgrep Secrets integrations
Semgrep Secrets lists 12 integrations on its own site.
- GitHub
- GitLab
- Bitbucket
- Azure DevOps
- Jenkins
- CircleCI
- Buildkite
- Slack
- Webhooks
- VS Code
- IntelliJ
See all Semgrep Secrets integrations →
Alternatives to Semgrep Secrets
- GitGuardianBroad secrets scanning with developer workflow controls, remediation, and enterprise deployment options.9.3
- TruffleHogDeep secret detection and credential verification for development and security teams.9.2
- KingfisherA broad, free scanner for exposed credentials across code, cloud, containers, and developer platforms.9.1
See all Semgrep Secrets alternatives →
Also Ranked In
Semgrep Secrets is ranked in 2 of our directories.
Used Semgrep Secrets? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Semgrep Secrets for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Semgrep Secrets is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/semgrep-secrets/"><img src="https://www.itechguides.com/best/badge/semgrep-secrets.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update