semgrep

● Identity checked

Code · Vendor site 2026-10-04

Semgrep is an application security platform combining AI-assisted static analysis, software supply chain scanning, and secrets detection for modern codebases. It targets security and engineering teams integrating checks into CI/CD with rules, triage, and remediation workflows.

Updated 2026-10-04View sources

Official website

Category: Code
Free access: Community Edition includes Code, Supply Chain, and Secrets modules at $0/month per contributor on the pricing page.
API access: Not confirmed

Is semgrep right for you?

A good fit for

AppSec and platform teams that want developer-friendly SAST/SCA/secrets scanning integrated into Git workflows.

Before you choose

Team tier starts at $30/month per contributor with optional Secrets module listed separately at $15/month per contributor.

AI-assisted AppSec platform

Semgrep combines rule-based and AI-assisted analysis to find and fix code, dependency, and secrets issues directly in developer workflows.

What it can do

Features & capabilities

Unknown is different from unavailable. Each fact carries its own evidence.

Capability	Value	Evidence	Checked
Product modules	Homepage markets Semgrep Code (SAST), Supply Chain (SCA), and Secrets detection under one platform.	Facts sourced	2026-10-04
Team pricing	Pricing page shows Team starting at $30/month per contributor with AI-powered triage and remediation.	Facts sourced	2026-10-04
Community tier	Community Edition lists Code, Supply Chain, and Secrets at $0/month per contributor.	Facts sourced	2026-10-04

Understand the total cost

semgrep pricing & plans

Community Edition

Free

Free modules listed at $0/month per contributor

Code: $0/month per contributor
Supply Chain: $0/month per contributor
Secrets: $0/month per contributor

Team

$30.00 /mo

Starting at $30/month per contributor

AI credits: 20 per developer per month
Support: SSO and award-winning support listed

Explore pricing & history

Alternatives to semgrep

View all ↗

Aikido Security

Aikido Security is a developer-first application security platform covering dependencies, SAST, secrets, cloud misconfigurations, containers, and AI-assisted autofix across the SDLC. Pricing tiers scale from a free Developer workspace to paid Basic, Pro, and Advanced plans for larger repos and infrastructure coverage.

Explore tool

cubic

cubic is an AI code review product that analyzes pull requests and entire repositories to surface hard-to-find bugs in complex codebases. It integrates with engineering workflows and advertises top benchmark scores alongside team, pro, and max developer plans.

Explore tool

Capy

Capy is an AI software engineer that orchestrates parallel cloud coding agents to plan, build, review, and ship changes from Slack, desktop, and web clients. Use cases include PR review, visual QA, issue triage, documentation, migrations, refactors, and scheduled E2E testing.

Explore tool

The practical questions

Frequently asked questions

What is semgrep used for?

Does semgrep have a free plan?

Community Edition includes Code, Supply Chain, and Secrets modules at $0/month per contributor on the pricing page.. This record lists ongoing free access; check the plan limits before starting.

How much does semgrep cost?

The listed monthly price is $30.00 USD at monthly billing. See the plan cards for entitlements, billing commitments and seat minimums.

Can I use semgrep through an API?

Not confirmed. API access and subscription access may have different terms; consult the linked sources.

What should I check before choosing it?

Team tier starts at $30/month per contributor with optional Secrets module listed separately at $15/month per contributor.

Price history

No retained pricing changes yet. A current price alone does not establish a historical trend.

How this profile is supported

Identity and profile

Reviewed vendor source

Read original source ↗

2026-10-04

Facts apply to the named version and check date. Send a sourced correction if something changed.