Products
- Semgrep Code
  Find and fix the issues that matter in your code (SAST)
- Semgrep Supply Chain
  Find and fix reachable dependency vulnerabilities (SCA)
- Semgrep Secrets
  Find and fix hardcoded secrets with semantic analysis
- Semgrep Assistant
  Get triage and code fix recommendations from AI
- Semgrep AppSec Platform
  Automate, manage, and enforce security across your organization
- Semgrep Pro Engine
  Find more true positives and fewer false positives with dataflow analysis
- Product Updates
  Stay up to date on changes to the Semgrep platform, big and small
Solutions
- Software supply chain security
  Mitigate software supply chain risks
- Static application security testing
  Increase security while accelerating development
- OWASP Top 10
  Prevent the most critical web application security risks
Resources
- Docs
  Want to read all the docs? Start here
- Blog
  Get the latest news about Semgrep
- ROI Calculator
  See how Semgrep can save you time and money
- Community Slack
  Join the friendly Slack group to ask questions or share feedback
- Events
  Join us at a Semgrep Event!
- Case Studies
  See why users love Semgrep
- Video Library
  View our library of on-demand webinars
Company
- About
  The Semgrep story & values
- Careers
  Join the team!
- Partners
  Become a Semgrep partner
Pricing
Sign in
Product support
Contact us
Book demo Try for free

Semgrep video library On-demand

How to take a guardrails approach to SAST with Semgrep Code

Date August 28th, 2024

details

Secure guardrails are the natural evolution of “shifting left” for AppSec. While embedding security earlier in the development process was an obvious necessity for AppSec teams to scale, Guardrails takes into consideration what “shift left” did not - the actual experience of developers.

In this webinar, we go over Semgrep Code’s guardrails approach to SAST, and how organizations of all sizes can use Semgrep Code to scale their impact.

In this webinar we cover:

How Semgrep Code’s Guardrails approach to SAST makes it possible for developers to actually fix the majority of issues they see
Why it’s critical for security tools to assume that developers have no security experience
Why developers don’t action on the majority of findings from SAST tools

speakers

Chushi Li
Semgrep

Product Marketing Manager

Milan Williams
Semgrep

Product Manager