Join the Semgrep Custom Workflows Private Beta

Partner with the Semgrep team to design, build, and deploy a custom security workflow on Semgrep infrastructure. Participation is free during beta. Spots are limited.

How the private beta works:

  1. Sign up to join the waitlist.

  2. Partner with the Semgrep team to identify the highest-leverage workflow for your organization.

  3. Design and build the workflow together using the SDK and pre-built tools.

  4. Deploy to Semgrep infrastructure and run it reliably across your repos.

Combine tools, define steps, deploy at scale

A workflow connects code events like PRs and scans to Semgrep tools, AI agents, and your own integrations. Each step runs in sequence, producing structured results across every repo on Semgrep infrastructure.

Join the waitlist

Your privacy matters to us. By submitting this form, you agree to our Privacy Policy

What is Semgrep Custom Workflows?

Semgrep Custom Workflows lets security teams build end-to-end code security automations in Python. Combine Semgrep's analysis engines, LLMs, and your own tools into workflows that run across your entire repository fleet. Teams use workflows to:

  • Triage findings with custom review logic
  • Detect issues that don't fit generic rules
  • Validate whether a finding is exploitable
  • Generate fixes and pull requests
  • Encode security policies that run consistently across repos

Workflows are plain Python built with the Semgrep SDK. At a high level, each workflow defines:

  • Triggers. What starts it: PR events, scheduled scans, webhooks, or API calls.
  • Steps. Methods that run in parallel or sequentially. Each step maps to any tool in the library: Semgrep engines, LLMs, dev tools, or your own.
  • Outcomes. Structured results delivered into Jira, Slack, GitHub, or the Semgrep dashboard.

See Custom Workflows in action...

Introducing Semgrep Workflows

A platform for building automated code security pipelines.