Semgrep

Semgrep is an application security platform that scans code for bugs, security vulnerabilities, and enforce coding standards. The job it does: assessing, monitoring and responding to security threats on your behalf.

It makes the most sense for companies without a full security team. Alongside the main category they mention Cyber Security, Network Security and Security. As a mid-sized company team themselves (51 to 200 people), they tend to serve customers of a similar scale best.

Semgrep is based in San Francisco, California. Their site is semgrep.dev.

Our checklist for this category: response times, what is included in monitoring, and reporting. Ask for a trial on your own data, not a canned demo.

If you have worked with Semgrep, tell the next buyer what you paid and what surprised you. That is the part of this page we cannot write.