Semgrep

Semgrep (operating at semgrep.dev) is a developer-friendly application security platform engineered for code security. Founded in 2017 by Drew Dennison, Isaac Evans, and Luke O'Malley and headquartered in San Francisco, Semgrep does X instead of Y by providing a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. Under the hood, Semgrep uses AI-assisted SAST to scan source code and surface true and actionable security issues. This allows developers and security teams to catch, flag, and fix real issues before they ship, powered by security that learns as you build. Backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital.