Semgrep Presents

Making shift left work: resources for security leaders

Webinar:

Guiding developers at Netflix with "paved roads"

Join Clint Gibler and Jason Chan, former VP of InfoSec @ Netflix, as they discuss the benefits and challenges of rolling out "paved roads" to codify secure development practices.

Downloadable checklist:

Make shift left work and escape the AppSec doom loop

Download the five-step guide to making shift left work, so you can ensure your organization has all of the required pieces to build and scale a world-class AppSec program.

Download the checklist

Case study:

How Thinkific helps devs ship securely by default

Learn how a lean security team at Thinkific was able to manage their growing vulnerability backlog by helping developers ship securely by default, freeing up the AppSec team's bandwidth.

Read the case study

“

Semgrep makes it so that developers can focus on the issues they need to focus on rather than the ones they don’t

”

Devyani Vij

Senior Application Security Engineer, Tide

“

Getting developers aligned on a SAST product and having them actually use it is the hardest part of the job for an AppSec Engineer. We were able to achieve this with Semgrep Code.

”

Aleksandr Krasnov

Staff Security Engineer, Thinkific

“

It's easy enough to write rules for Semgrep that security and other engineering teams use it to solve complex problems. This flexibility is a huge win, and the library of managed rules means we only have to write our own when we have custom problems.

”

Rob Picard

Security Lead, Vanta

“

Semgrep makes it so that developers can focus on the issues they need to focus on rather than the ones they don’t

”

Devyani Vij

Senior Application Security Engineer, Tide

“

Getting developers aligned on a SAST product and having them actually use it is the hardest part of the job for an AppSec Engineer. We were able to achieve this with Semgrep Code.

”

Aleksandr Krasnov

Staff Security Engineer, Thinkific

Loved by engineers at:

Semgrep makes shift left work.

Book a demo Start scanning for free

Dev AkhaweHead of Security, Figma

Figmates get actionable security feedback in their PRs, while rule analytics give the security team feedback on their effectiveness. The simple [rule] syntax lets us extend Semgrep to catch new patterns, going from idea to live in an hour.