Semgrep

Fast static analysis with custom rules.

About Semgrep

In Semgrep’s own words: “An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.”

Semgrep is open source and has a free plan.

People switching from Snyk often consider Semgrep.

Semgrep is an alternative to

SnykSee all Snyk alternatives

Similar to Semgrep

CheckmarxEnterprise application security testing.
GitHub Advanced SecurityCode scanning, secret scanning and dependency review in GitHub.
Mend.ioSoftware composition analysis and AppSec.
SonarQubeCode quality and security analysis.

Listed for information; LaunchStall isn’t affiliated with Semgrep. The quoted description comes from semgrep.dev. Features and plans change — check the official site for current details.