Profoundly improve software security and reliability

30+

Coding languages
Plus support for CI/CD tools such as GitHub, GitLab, and more

2,000+

Community rules
Contributed by Semgrep and community members

75M+

Scans
Millions of projects scanned every year

100+

Releases
Weekly releases with new features shipped

How we came to be

Founded by Drew Dennison, Isaac Evans, and Luke O’Malley in 2017, the company’s mission has been to profoundly improve software security from day 1.

In 2020, the team reignited development of the open source project sgrep, which evolved into Semgrep, today a leading security solution used by companies like Figma, Dropbox, Slack, Snowflake, and many more.

Over 100M+ annual scans

Semgrep Secrets launched

Semgrep raises Series C

Release of Semgrep 1.0

Semgrep Supply Chain launched

Semgrep raises Series B

Semgrep released

First user workshop at DEF CON

Company founded

Our values

Why we love working on the Semgrep team

Mutual Respect

Everybody brings incredible skills and unique expertise to the team. We listen to what each of our coworkers has to say because their insight is valuable.

Honesty

We respect each other enough to tell the truth, no matter what. We share our concerns and disagreements openly, as well as our praise and appreciation.

Impact

Each member of our team honestly evaluates their work to understand its impact on our users, the company, and the community at large.

Mission-Driven

We believe we can positively impact the world by empowering all engineers to use code analysis.

News of our latest Series C

We raised $53M in Series C funding, led by Lightspeed Venture Partners with participation from previous investors Felicis Ventures, Redpoint Ventures, and Sequoia Capital.

Read about our Series C

Trusted by Our Community

"Semgrep Supply Chain helped us be more productive by reducing the number of false positives."

Jessica Grider
Sr. DevSecOps Engineer, Policygenius

"Our engineers are excited we've got Semgrep Supply Chain. Managing vulnerabilities in NPM packages is chaos without any sense of reachability."

Rob Picard
Security Lead, Vanta

"Clarity affords focus. Rather than chasing vulnerability ghosts, Semgrep Supply chain helps me fine-tune the attack plan to go after the real risks lurking in my code."

Daniel Cuthbert
Security Researcher

We are growing! Join us

Join us and help shape the future of software analysis and security.

See open roles