---
description: Get information about Semgrep price, usability & features from verified user experiences. Read reviews from Indian business users & discover similar tools.
image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress
title: Semgrep Price, Features, Reviews & Ratings - Capterra India
---

Breadcrumb: [Home](/) > [Static Application Security Testing (SAST) Software](/directory/32818/static-application-security-testing-%28sast%29/software) > [Semgrep](/software/1160058/Semgrep)

# Semgrep

Canonical: https://www.capterra.in/software/1160058/Semgrep

> Cloud-based application security platform offering SAST, SCA, and secrets detection to find vulnerabilities in source code across 35+.
> 
> Verdict: Rated \*\*\*\* by 0 users. Top-rated for **Overall Quality**.

-----

## Overview

### Who Uses Semgrep?

Small to large businesses in technology, software development, and regulated industries such as those with SOC 2 requirements. Also used by independent security consultants.

## About the vendor

- **Company**: Semgrep
- **Location**: San Francisco, US
- **Founded**: 2017

## Commercial Context

- **Target Audience**: Self Employed, 2–10, 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+
- **Supported Languages**: English
- **Available Countries**: United States

## Integrations (9 total)

- Azure DevOps Labs
- Azure Pipelines
- Bitbucket
- Cursor
- Elsevier Pure
- Git
- Jira
- Slack
- Visual Studio Code

## Support Options

- Email/Help Desk
- FAQs/Forum
- Knowledge Base Software
- Chat

## Category

- [Static Application Security Testing (SAST) Software](https://www.capterra.in/directory/32818/static-application-security-testing-%28sast%29/software)

## Related Categories

- [Static Application Security Testing (SAST) Software](https://www.capterra.in/directory/32818/static-application-security-testing-%28sast%29/software)
- [Vulnerability Scanner Software](https://www.capterra.in/directory/32775/vulnerability-scanner/software)
- [Generative AI Tools](https://www.capterra.in/directory/34155/generative-ai/software)

## Alternatives

1. [GitHub](https://www.capterra.in/software/129067/github) — 4.8/5 (6206 reviews)
2. [GitLab](https://www.capterra.in/software/159806/gitlab) — 4.6/5 (1226 reviews)
3. [Mend.io](https://www.capterra.in/software/165634/mend-app) — 4.6/5 (920 reviews)
4. [Dynatrace](https://www.capterra.in/software/81932/dynatrace) — 4.6/5 (86 reviews)
5. [SonarQube](https://www.capterra.in/software/210481/sonarqube) — 4.5/5 (68 reviews)

## Links

- [View on Capterra](https://www.capterra.in/software/1160058/Semgrep)

## This page is available in the following languages

| Locale | URL |
| en | <https://www.capterra.com/p/10106824/Semgrep/> |
| en-AE | <https://www.capterra.ae/software/1160058/Semgrep> |
| en-AU | <https://www.capterra.com.au/software/1160058/Semgrep> |
| en-CA | <https://www.capterra.ca/software/1160058/Semgrep> |
| en-GB | <https://www.capterra.co.uk/software/1160058/Semgrep> |
| en-IE | <https://www.capterra.ie/software/1160058/Semgrep> |
| en-IL | <https://www.capterra.co.il/software/1160058/Semgrep> |
| en-IN | <https://www.capterra.in/software/1160058/Semgrep> |
| en-NZ | <https://www.capterra.co.nz/software/1160058/Semgrep> |
| en-SG | <https://www.capterra.com.sg/software/1160058/Semgrep> |
| en-ZA | <https://www.capterra.co.za/software/1160058/Semgrep> |

-----

## Structured Data

<script type="application/ld+json">
  {"@context":"https://schema.org","@graph":[{"name":"Capterra India","address":{"@type":"PostalAddress","addressLocality":"Mumbai","addressRegion":"MH","postalCode":"400051","streetAddress":"G2.com, Inc. Raheja Towers 2nd Floor C-30 G- Block Bandra East Mumbai 400051 India"},"description":"Capterra India helps businesses find the best software. With verified reviews, prices & features, our interactive tool makes software selection fast & easy.","email":"Global@capterra.com","url":"https://www.capterra.in/","logo":"https://dm-localsites-assets-prod.imgix.net/images/capterra/logo-a9b3b18653bd44e574e5108c22ab4d3c.svg","@id":"https://www.capterra.in/#organization","@type":"Organization","parentOrganization":"G2.com, Inc.","sameAs":["https://twitter.com/capterra","https://www.facebook.com/Capterra/","https://www.linkedin.com/company/capterra","https://www.instagram.com/capterra/","https://www.youtube.com/@CapterraIndia"]},{"name":"Semgrep","description":"Semgrep is a cloud-based application security platform that scans source code to find security vulnerabilities without running the code. It covers three main areas: static code analysis (SAST), open source dependency scanning (SCA), and secrets detection. Teams can run scans through a CI/CD pipeline, directly in their code editor, or via managed cloud scans with no setup required.\n\nSecurity and development teams use Semgrep to catch issues like SQL injection, cross-site scripting, hardcoded credentials, and vulnerable dependencies before code reaches production. Findings and fix guidance are delivered directly in pull requests, so developers can act without switching tools.\n\nKey features include reachability analysis to confirm whether a dependency flaw is actually exploitable, automated pull request generation for fixes, and a unified dashboard for managing rules and findings across all repositories.","url":"https://www.capterra.in/software/1160058/Semgrep","@id":"https://www.capterra.in/software/1160058/Semgrep#software","@type":"SoftwareApplication","publisher":{"@id":"https://www.capterra.in/#organization"},"applicationCategory":"BusinessApplication"},{"@id":"https://www.capterra.in/software/1160058/Semgrep#faqs","@type":"FAQPage","mainEntity":[{"name":"What Is Semgrep?","@type":"Question","acceptedAnswer":{"text":"Semgrep is a cloud-based application security platform that scans source code to find security vulnerabilities without running the code. It covers three main areas: static code analysis (SAST), open source dependency scanning (SCA), and secrets detection. Teams can run scans through a CI/CD pipeline, directly in their code editor, or via managed cloud scans with no setup required.Security and development teams use Semgrep to catch issues like SQL injection, cross-site scripting, hardcoded credentials, and vulnerable dependencies before code reaches production. Findings and fix guidance are delivered directly in pull requests, so developers can act without switching tools.Key features include reachability analysis to confirm whether a dependency flaw is actually exploitable, automated pull request generation for fixes, and a unified dashboard for managing rules and findings across all repositories.","@type":"Answer"}},{"name":"Who Uses Semgrep?","@type":"Question","acceptedAnswer":{"text":"Small to large businesses in technology, software development, and regulated industries such as those with SOC 2 requirements. Also used by independent security consultants.","@type":"Answer"}}]},{"@id":"https://www.capterra.in/software/1160058/Semgrep#breadcrumblist","@type":"BreadcrumbList","itemListElement":[{"name":"Home","position":1,"item":"/","@type":"ListItem"},{"name":"Static Application Security Testing (SAST) Software","position":2,"item":"/directory/32818/static-application-security-testing-%28sast%29/software","@type":"ListItem"},{"name":"Semgrep","position":3,"item":"/software/1160058/Semgrep","@type":"ListItem"}]}]}
</script>