Semgrep Code

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Semgrep Code is ranked #5 of 38 in static analysis tools on Inferse. It runs on API, Browser extension, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. Paid plans start at $30/mo.

Compared on static analysis tools

Free plan: Yessemgrep.dev

Facts

Purpose: Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them.semgrep.dev · 30 Sept 2026
Detection: Its multimodal detection combines deterministic SAST for issues such as XSS and SQL injection with AI analysis for complex flaws such as IDOR and business logic vulnerabilities.semgrep.dev · 30 Sept 2026
Languages: The pricing comparison lists support for 35+ programming languages.semgrep.dev · 30 Sept 2026
Triage: Semgrep says Multimodal can reduce findings requiring triage by 20% on activation and improve as it learns from triage decisions.semgrep.dev · 30 Sept 2026
Remediation: The product provides tailored, step-by-step remediation instructions in pull requests.semgrep.dev · 30 Sept 2026
Integrations: The integrations page lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among supported SCM and CI tools.semgrep.dev · 30 Sept 2026
Developer workflow: The integrations page lists VS Code and IntelliJ IDE extensions, and Slack, email, and webhooks for notifications.semgrep.dev · 30 Sept 2026
Free tier limits: The Free Edition includes Code and Supply Chain, allows scanning up to 10 repositories, and has a maximum of 10 contributors.semgrep.dev · 30 Sept 2026
Paid tier limits: Teams supports up to 500 private repositories, while Enterprise has no repository or contributor limit.semgrep.dev · 30 Sept 2026
Code handling: For local or fully CI-based scans, Semgrep says source code stays on the user's computer or CI environment; opting into AI processing sends part of a file containing a finding to a model.semgrep.dev · 30 Sept 2026
Compliance: Semgrep's trust portal describes a SOC 2 Type II report and a full-scope third-party penetration test covering the Semgrep AppSec Platform, including Semgrep Code.trust.semgrep.dev · 30 Sept 2026
Support: The pricing page lists community-based support for Free Edition, award-winning support for Teams, and dedicated account management and tailored onboarding for Enterprise.semgrep.dev · 30 Sept 2026