DevOps & CI/CDOpen Source✦ Free Tier
Semgrep
Fast, lightweight static analysis for finding bugs and security issues
⭐ 10,600 stars● Health 75 — ActiveDev Productivity
About
Semgrep is a fast, open-source static analysis tool that lets you write custom rules in YAML to detect bugs, security vulnerabilities, and code patterns specific to your codebase. Its rule library covers OWASP Top 10 and common security issues across 30+ languages.
Choose Semgrep when…
- •want custom security rules for your codebase's specific patterns
- •need lightweight SAST that runs in CI without heavy setup
- •detecting anti-patterns via AST matching across languages
Builder Slot
Who handles your code quality?Optional for most stacks
Automates code review, PR triage, test generation, and security scanning
Dev Tools
Optional
App Infra
Not applicable
Hybrid
Optional
Other tools in this slot:
Stack Genome Detection
AIchitect's Genome scanner detects Semgrep in your project via these signals:
pip packages
semgrepenv vars
SEMGREP_APP_TOKENconfig files
.semgrepignoresemgrep.ymlOften paired with (1)
Alternatives to consider (1)
Pricing
✦ Free tier available
OSSFree
Team$40/developer/mo
Badge
Add to your GitHub README
[](https://aichitect.dev/tool/semgrep)Explore the full AI landscape
See how Semgrep fits into the bigger picture — browse all 207 tools and their relationships.