Semgrep
San Francisco, CA, USA · Founded 2017
Maker of the Semgrep static analysis engine (formerly r2c) and the commercial Semgrep AppSec Platform; the CLI/engine is LGPL-2.1, but the bundled default rule registry moved to a separate, non-OSI Semgrep Rules License in December 2024, prompting the fully open Opengrep community fork in early 2025.
Verified Source: 1
Portfolio
Tools by Semgrep cataloged in the stack.