🔒SecurityRepoIndex
Submit Tool
🎯 Offensive Security

Semgrep

Static analysis for 30+ languages

4.7/ 512,000 GitHub starsPythonMIT
GitHub

⚡ TL;DR

What
Static analysis for 30+ languages
Who
Devs, AppSec
Catch
Takes time
Verdict
⭐⭐⭐⭐⭐ Essential

🎯 The Problem It Solves

Devs, AppSec need static analysis for 30+ languages. This tool solves that problem simply and effectively.

🔧 How It Works

Install Semgrep and follow the quick start steps below to get results in minutes.

🚀 Installation & Quick Start

Installation

pip install semgrep

Quick Start

  1. pip install semgrep
  2. semgrep --config auto .
  3. semgrep --config p/webc

✅ Pros

  • •30+ languages
  • •Custom rules
  • •Free tier

❌ Cons

  • •Takes time
  • •False positives

💬 Practitioner Verdict

"Best open-source SAST tool."
— Emmanuel, Security Reviewer

📊 Specifications

Language
Python
License
MIT
Platform
Linux, macOS, Windows
Kill Chain
Multiple
MITRE ATT&CK
T1190, T1059

💰 Pricing Reality

Free (OSS) + Cloud paid.

👥 Community Health

Stars12,000
Forks1,500
Contributors240
Health Score7.4/10

🏷️ Tags

Open Source

🔗 Similar Tools