Semgrep Code
Static analysis of application source code with Semgrep's code-scanning rules and engine.
United States · Detroit· Product vendor · Application security

Open-source SAST and a commercial code security platform.
To keep Verified features after claiming, choose a paid plan. Or claim and switch to a Free directory listing.
Semgrep started as an OSS static analysis engine and sells a platform for rules, supply chain, and secrets.
Products
1 productStatic analysis of application source code with Semgrep's code-scanning rules and engine.
Services
0 servicesNo services have been added to this profile yet.
Manage Semgrep? Show buyers the expertise you deliver.
Manage Semgrep? Claim or sign in to expand this profile. Product and service listings are included with Verified and Featured.
BEFORE THE SALES CALL
Source-backed pricing for the scope shown. Confirm the final quote, taxes and terms with the vendor.
Semgrep Code · Cloud service
Free edition
Hosted Free edition: maximum 10 contributors and 10 private repositories. Source-control authentication is through GitHub or GitLab. Paid features and AI usage have separate limits.
Semgrep Code · Cloud service
$30 per contributor / month
Code only; Supply Chain and Secrets are priced separately. Contributors are counted over 90 days on scanned private repositories. Confirm billing commitment, currency and taxes with the vendor.
Semgrep Code · Cloud service
Contact sales
Custom quote for Code and the selected platform options. Agree on contributor count, deployment, support and any additional products; dedicated infrastructure is optional.
CHECK THE FIT
Specific products, editions and limits. Open a requirement to check its sources.
Teams includes SSO. Configure an Entra SAML enterprise application with the Semgrep entity ID, reply URL and required name/email claims. Entra OIDC is not supported. Test administrator SSO before disabling existing GitHub/GitLab login; this does not establish SCIM provisioning.
Documentation checked 2026-09-19Teams includes SSO with documented Okta SAML and OIDC setup. Configure the organization email domain and IdP attributes, then test administrator access before enforcing SSO. Newly added users receive Member access by default. This covers platform sign-in, not lifecycle provisioning.
Documentation checked 2026-09-19Create a Google Workspace custom SAML application using primary email as NameID and the required name/email attributes. Requires administration access to Workspace and Semgrep. Teams includes SSO; this is workforce authentication, not consumer Google login or proof of SCIM.
Documentation checked 2026-09-19Reviews
No public reviews yet.
Sign in to review. You can delete it later.
Similar companies
Developer-first SCA, SAST, and container security.
Secrets detection in git, tickets, and production.
Security testing and vulnerability management.
Bug bounty programs and crowdsourced security testing.
Client-side JavaScript protection and payment page monitoring.
Bot mitigation for websites and APIs.