For developers shipping with AI

Fix the risks your agent introduces

Coding agents introduce malicious packages, hardcoded secrets, and vulnerable patterns. Guardian catches each one and returns the fix context without interrupting you.

Install Claude plugin Start free trial
Installs in under 5 minutes. 30 days free, then $10 per seat per month.
Claude Code · Guardian active

Claude Code › writes billing/config.py

+ STRIPE_SECRET_KEY = "sk_live_••••••••"

Guardian hook › scans the file with Semgrep Secrets

BLOCKED · hardcoded secret
A live credential would enter Git history in billing/config.py.

Claude Code › moves the credential to an environment variable

- STRIPE_SECRET_KEY = "sk_live_••••••••"
+ STRIPE_SECRET_KEY = os.environ["STRIPE_SECRET_KEY"]

Guardian › no hardcoded secret found in the updated file

Stays in your loop

One install, two moving parts

An MCP server and hooks ship together in one plugin. Findings arrive in place, so your agent keeps working and you stay in your flow.

MCP Server

The agent asks Semgrep and Semgrep answers. The MCP server exposes Semgrep scanning as tools the agent can call directly.

Learn more about the MCP →

Hooks

Hooks fire whenever Claude Code writes a file, ensuring a scan regardless of what the agent does or forgets.

Learn more about Hooks →
Caught at generation time

Move security review to the moment code is written

Guardian catches risky code and packages while your agent is still working, when the context is fresh and a change is quick to make.

Fix security issues earlier, before downstream effort compounds
  1. Agent writes Guardian checks now Lowest effort to fix
  2. Pull request More context switching
  3. CI More rework
  4. Production Highest disruption
Supply Chain

Malicious and compromised packages

Guardian blocks malware, known-bad dependencies, and typosquats before they install.

Code security

Vulnerable patterns

SQL injection, XSS, IDOR, and other common flaws are caught as they are generated.

Secrets

Hardcoded keys and credentials

API keys, tokens, passwords, and cloud credentials are caught before they reach version control.

Get started

Install in three steps

Under 5 minutes from install to your first scan.

  1. 1

    Run the install command

    Terminal 
    claude plugin install semgrep@claude-plugins-official
  2. 2

    Start a new Claude Code session

    The plugin loads automatically in the new session.

  3. 3

    Sign in and start your trial

    Create a free Semgrep account or sign in. Guardian starts checking the next file your agent writes.

Pricing

Guardian plans for every way you build

Choose the plan that fits how you or your organization builds with AI.

Guardian
$10/month
per seat after a 30-day free trial

Guardian-only for individual developers and teams of any size.

  • Guardian runs in Claude Code
  • SAST, SCA, and Secrets checks
  • Inline findings and drafted fixes
Get started
Guardian + Semgrep Code
$40/month
per seat for the bundle

Bundles Guardian with Semgrep Code. Teams can still choose Guardian-only for $10 per seat.

  • Cross-file analysis with Pro rules
  • AI-powered detection, triage, and remediation
  • 20 AI credits per developer each month
  • One-click CI/CD deploy, SSO, and award-winning support
Get started
Enterprise
Custom

For larger organizations planning a tailored rollout.

  • Guardian for larger organizations
  • Tailored rollout
  • Custom pricing through Semgrep Sales
Contact sales
Catch risks earlier

Ship fast, catch risks early

Guardian checks the code and packages your agent introduces while you keep building. Setup takes less than 5 minutes.

Install Claude plugin Start free trial