Welcome to the Semgrep blog

Take control of sensitive code without developer frustration

Fine-grained policy automation for robust security and greater velocity

Jaweed Metz Katie Kent

Announcing an AI AppSec engineer that users agree with 95% of the time

With its transparent engine, fast performance, and LLM-friendly rule syntax, Semgrep is uniquely positioned to leverage AI and tackle AppSec's biggest challenges: false...

Chushi Li

How we built an AppSec AI that security researchers agree with 96% of the time

Getting Semgrep Assistant to triage vulnerabilities with a 96% true positive accuracy was hard, but there were lots of learnings along the way. In this blog, we’ll dive into the...

Jack Moxon Seth Jaksik

Less effort, more insight: Introducing Dependency Graph for Supply Chain

You cannot secure what you cannot see. Introducing Semgrep’s Dependency Graph: effortless visibility into your software supply chain. Empower AppSec teams to uncover and...

Cullen Harwood Aaron Acosta Leif Dreizler

AppSec guides, not gates: Introducing secure guardrails with Semgrep

"Shift left" was popular, but has largely failed to deliver on its promises. For too many teams, it was a way to take the same old security tools and point the firehose of...

Isaac Evans

Rapidly deploy code scans across your organization with Semgrep managed scanning

You can now roll out Semgrep at ludicrous speed without any manual, per-repo CI/CD configuration. Whether you have one repo or thousands of repos, It Just Works.

Pablo Estrada

Overrated and underperforming: transitive reachability analysis

Due to complex dependency layers and static analysis limitations, transitive reachability analysis struggles to deliver actionable insights.

Kyle Kelly

10x your AppSec program with Semgrep Assistant

Assistant helps both AppSec engineers and developers make the correct decisions faster, with far less cognitive load required. This means users only spend their time and...

Chushi Li
Categories
Categories
  • All
  • Announcements
  • Best practices
  • Development
  • Meetups
  • Security
  • Tips and tricks
Subscribe to our blog
RSS feedSubscribe via RSS
Latest posts