Semgrep provides an AppSec Platform that delivers SAST, SCA, and secrets scanning to help developers and security engineers find and fix security and reliability issues. Its core product emphasizes high signal-to-noise, prioritization, and developer-friendly workflows to keep engineering velocity high while improving security. Semgrep recently launched Semgrep Assistant, an LLM-powered agent that learns an organization’s SDLC to automatically find, triage, prioritize, and fix important security issues and convert them into secure guardrails. The company positions its platform as an autonomous code security solution that supports proactive security engineering at an affordable price. Semgrep serves hundreds of customers and counts organizations like Snowflake and Dropbox as users. Financially, the company has raised a total of $204M to date following the latest round. Semgrep combines an open-source code-analysis engine and freely licensed rules with a vertically integrated SaaS offering to find vulnerabilities during development. The company released its open-source tooling at the end of 2020 and the tools now have around 2 million users. Its revenue-producing products grew 7.5x last year, indicating strong commercial traction alongside broad open-source adoption. Semgrep was founded/launched in 2017 and has grown to about 90 employees with plans to add roughly 50 more this year. Leadership emphasizes deliberate, diverse hiring and balancing product development with go-to-market expansion.

Total raised

$153M

Funding rounds

2

Latest round

Series D

Latest activity

Feb 2025