Semmle offers a code-analysis platform that treats code as data and lets users express analysis problems as database-like queries to find vulnerabilities. Once a query is created it can be run continuously against code to prevent repeat mistakes. The company encourages sharing queries via a public repository and makes its solution freely available to open-source developers. Semmle currently analyzes every commit of almost 80,000 open-source projects while also selling a paid product to enterprise customers including Microsoft, Google, Credit Suisse, NASA and Nasdaq. It spun out of research at Oxford University in 2006 and is based in San Francisco with about 60 employees. Semmle plans to use the new funding to build out sales and marketing and expand its customer base into a wider enterprise market. Semmle provides a code- and process-analysis platform that inspects version changes and identifies poor or risky coding patterns across multiple languages. The product correlates code quality with business signals—budgets, team location, and tickets—to give managers and C-level executives holistic insight into engineering effectiveness. Semmle ships hundreds of built-in analyses and continuously refines rules in collaboration with customers to detect issues such as JavaBeans violations and potential XSS vulnerabilities. Customers include Citi, Credit Suisse, Dell, Murex, NASA and Trafigura; collectively they have used the platform to manage tens of thousands of developers and to parse billions of lines of code. The company plans a cloud product to broaden access, will expand sales and marketing (including establishing a permanent U.S. office), and will strengthen engineering to integrate more data sources. Financially, Semmle recently closed an $8M Series A to fund these go-to-market and product initiatives.

Total raised

$29M

Funding rounds

2

Latest round

Series B

Latest activity

Aug 2018