Rules for popular languages and frameworks
Compared to Community rules, Pro rules provide better coverage for Java, JavaScript, TypeScript, Python, PHP, Ruby, C#, Swift, and Go.
The combination of Pro rules running on Pro Engine provides high-confidence results with scans running across files.
Rules are continuously updated by our Security Research team based on the rule performance and user feedback
High-confidence rules typically use features such as taint tracking analysis with sets of sources, sinks, propagators, and sanitizers curated by our Security Research team.
By focusing on high confidence, Pro rules allow organizations to enhance their CI/CD pipelines with actionable security findings and avoid lengthy triage sessions.
Need for speed: static analysis version
Brandon WuPowerfully autofixing code with Semgrep's new AST-based approach
Nat MoteKeep your rules simple with symbolic propagation
Iago AbalA deep dive into Semgrep Supply Chain
Kurt BobergNeed for speed: static analysis version
Brandon WuPowerfully autofixing code with Semgrep's new AST-based approach
Nat MoteKeep your rules simple with symbolic propagation
Iago AbalA deep dive into Semgrep Supply Chain
Kurt BobergNeed for speed: static analysis version
Brandon WuPowerfully autofixing code with Semgrep's new AST-based approach
Nat MoteKeep your rules simple with symbolic propagation
Iago AbalA deep dive into Semgrep Supply Chain
Kurt Boberg
