Semgrep
Static analysis (SAST), dependency scanning (SCA), and secrets detection for code. · Semgrep · Security
Overview
Semgrep's free edition covers small teams.
Good fit
Use for code security scanning in a small team.
- small teams
- open source
Not a fit
Avoid if more than 10 people commit to private repos.
- large teams
Quickstart · 3 steps
- Sign up at semgrep.dev.
- Connect your GitHub or GitLab.
- Add Semgrep to CI or turn on managed scans.
Other free security options
Free tierWhat you get freeRiskCard
Let's Encrypt · Security
50 certificates per registered domain per week · 5 duplicate certificates (same identifiers) per week · 90-day certificate validity
Billing risk: None
No card
GitGuardian · Security
Up to 25 developers · Unlimited real-time secret scanning · Up to 500 historical scan detections
Billing risk: None
No card
Snyk · Security
5 projects · Snyk Code (SAST): 100 tests/month · Snyk Open Source (SCA): 200 tests
Billing risk: None
No card
Cloudflare · Security
Up to 20 widgets per account · Works without other Cloudflare services
Billing risk: None
No card