About us

About Us

About Semgrep

Code Analysis at Ludicrous Speed

Our MISSION

Profoundly improving software security and reliability.

30+Coding languagesPlus support for popular CI/CD tools such as GitHub, GitLab, and more

2000+Community rulesContributed by Semgrep and community members

30M+ScansMillions of projects scanned every year

100+ Releases Weekly releases with new features shipped

History

How we came to be

Founded by Drew Dennison, Isaac Evans, and Luke O’Malley in 2017, the company’s mission has been to profoundly improve software security from day 1.

In 2020, the team reignited development of the open source project sgrep, which evolved into Semgrep, today a leading security solution used by companies like Figma, Dropbox, Slack, Snowflake, and many more.

2017Company founded

2019First user workshop at DEF CON

2020Semgrep released

2021Semgrep raises Series B

2022Semgrep Supply Chain launched

2022Release of Semgrep 1.0

2023Semgrep raises Series C

Our values

Why we love working on the Semgrep team

Mutual Respect

Everybody brings incredible skills and unique expertise to the team. We listen to what each of our coworkers has to say because their insight is valuable.

Honesty

We respect each other enough to tell the truth, no matter what. We share our concerns and disagreements openly, as well as our praise and appreciation.

Impact

Each member of our team honestly evaluates their work to understand its impact on our users, the company, and the community at large.

Mission-Driven

We believe we can make a positive impact on the world by empowering everyone to use static analysis.

Our investors

News of our latest Series C

We raised $53M in Series C funding, led by Lightspeed Venture Partners with participation from previous investors Felicis Ventures, Redpoint Ventures, and Sequoia Capital.

Trusted by Our Community

Jessica Grider

Sr. DevSecOps Engineer, Policygenius

“Semgrep Supply Chain helped us be more productive by reducing the number of false positives.”

Rob Picard

Security Lead, Vanta

“Our engineers are excited we've got Semgrep Supply Chain. Managing vulnerabilities in NPM packages is chaos without any sense of reachability.”

Daniel Cuthbert

Security Researcher

"Clarity affords focus. Rather than chasing vulnerability ghosts, Semgrep Supply chain helps me fine-tune the attack plan to go after the real risks lurking in my code."

Jessica Grider

Sr. DevSecOps Engineer, Policygenius

“Semgrep Supply Chain helped us be more productive by reducing the number of false positives.”

Rob Picard

Security Lead, Vanta

“Our engineers are excited we've got Semgrep Supply Chain. Managing vulnerabilities in NPM packages is chaos without any sense of reachability.”

Daniel Cuthbert

Security Researcher

"Clarity affords focus. Rather than chasing vulnerability ghosts, Semgrep Supply chain helps me fine-tune the attack plan to go after the real risks lurking in my code."

Jessica Grider

Sr. DevSecOps Engineer, Policygenius

“Semgrep Supply Chain helped us be more productive by reducing the number of false positives.”

Rob Picard

Security Lead, Vanta

“Our engineers are excited we've got Semgrep Supply Chain. Managing vulnerabilities in NPM packages is chaos without any sense of reachability.”

Daniel Cuthbert

Security Researcher

"Clarity affords focus. Rather than chasing vulnerability ghosts, Semgrep Supply chain helps me fine-tune the attack plan to go after the real risks lurking in my code."