Semgrep’s Resource Hub

Semgrep co-founders Isaac Evans and Luke O’Malley announce the latest from Semgrep: Semgrep Code, powered by Pro Engine and Pro rules.

Isaac and Luke share stories about the early days of Semgrep, the impact of Artificial Intelligence and Machine Learning on security engineers, and their vision for the future of the security industry.

To learn more, visit: get.semgrep.dev/product-tour

Watch this recording to learn tips and tricks about how to prevent Broken Access Control from entering your code with Clint Gibler, Creator of tl;dr sec, and Jim Manico, Founder of Manicode.

Take a tour of Semgrep's new Pro Engine with Product Manager, Milan Williams. Semgrep Pro Engine is our new advanced analysis system uniquely designed to refine and enhance your results.

Milan explains the two core concepts behind the powerful Semgrep Pro Engine - interfile analysis and dataflow analysis - and how they work together to reduce noise and add explainability for better results.

To learn more, visit: semgrep.dev/products/pro-engine

Bence Nagy, Senior Software Engineer, explains 'reachability', a core concept of Semgrep Supply Chain. Semgrep Supply Chain helps you fix the security issues caused by your dependencies, but without flooding you with alerts.

So let's look at what reachability analysis is, and how it lets you prioritize the 2% of alerts that count!

To learn more, visit: semgrep.dev/product/semgrep-supply-chain

Go on a tour of Semgrep Code with Product Manager, Raghav Jain!

Teams looking to build a scalable SAST program with the customizability and speed of the Semgrep open-source engine can now enjoy the extended functionality you get with Semgrep Code. With Semgrep Code, you'll get:

- a more powerful code analysis

- developer workflow integrations,

- and necessary feedback loops to ensure that vulnerabilities are not just detected but actually get fixed.

Check out how Semgrep Code works!

To learn more, visit: semgrep.dev/products/semgrep-code