What Semgrep AppSec does
Semgrep is an application security platform that finds and fixes issues in code, dependencies and secrets, with a free Community Edition at its base. Semgrep Code is its static analysis product, Semgrep Supply Chain covers open-source dependencies and blocks malicious packages, Semgrep Secrets finds hardcoded credentials, and Semgrep Guardian scans AI-generated code as it is written. AI sits over the deterministic rules: findings are triaged automatically, likely false positives are set aside, and fix guidance is posted in pull requests and IDEs. It is aimed at developers, AppSec teams and CISOs. The Free edition covers up to 10 contributors and 10 repositories; Teams costs $30 per contributor a month for Code or Supply Chain, and Enterprise is custom.
How Semgrep AppSec compares with its closest alternatives
3 of the 5 closest alternatives have a free plan, as Semgrep AppSec does. Only Snyk Code AI lists a starting price, $25 a month. 3 of the 5 offer an API, as Semgrep AppSec does. Semgrep AppSec offers a web app, a command-line tool and a VS Code extension. Of the alternatives, 4 offer a web app, 2 offer a command-line tool and 3 offer a VS Code extension. Semgrep AppSec was founded in 2017; the alternatives were founded between 2012 and 2022, 2 of them earlier. Semgrep AppSec is based in San Francisco, United States; 2 of the 3 alternatives with a known headquarters are in the United States too, and the others in Belgium.