No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the category report

Prominent pros & cons

PROS

Semgrep offers the ability to write custom rules.
It integrates easily with CI/CD pipelines, making it developer-friendly.
Semgrep excels in SAST, secret scanning, and Software Composition Analysis scanning types.
The AI-backed capability is a major strength compared to competitors.
The flexibility in writing custom rules enhances its value.

CONS

There should be more information on how to acquire Semgrep, catering to beginners in application security, to make it more user-friendly.
Semgrep is really complex to maintain and to use.
Semgrep has a huge price tag.
Semgrep receives a six out of 10 because there are other tools that are better.
Their scan time is an issue; sometimes the scan never completes with AI-based scanning, making it difficult.
 

Semgrep Pros review quotes

Manjunath Maneppagol - PeerSpot reviewer
Cloud & Application Security at Sixt SE
Nov 29, 2025
Compared to other competitors in the market, the AI-backed capability is the biggest strength of Semgrep.
AP
Sr. Project Analyst [Cybersecurity] at a consultancy with 10,001+ employees
Jun 21, 2026
The feature is easy to use, saves a lot of time, and is streamlined in nature.
reviewer2014131 - PeerSpot reviewer
DevSecOps Security Engineer at a manufacturing company with 10,001+ employees
May 31, 2026
Semgrep flourishes with the SAST, secret scanning, and Software Composition Analysis types of scanning.
Find out what your peers are saying about Semgrep, SonarSource Sàrl, Snyk and others in Static Application Security Testing (SAST). Updated: May 2026.
900,644 professionals have used our research since 2012.
Francisco Javier Vergara - PeerSpot reviewer
SecOps Engineer at IriusRisk
Mar 20, 2026
The best part of Semgrep is its ease of integration with CI/CD pipelines and how it is a developer-friendly tool.
Henry Mwawai - PeerSpot reviewer
Security Consultant | Application Security at Jowatechs
Sep 23, 2024
The most valuable feature is the ability to write our custom rules.
 

Semgrep Cons review quotes

Manjunath Maneppagol - PeerSpot reviewer
Cloud & Application Security at Sixt SE
Nov 29, 2025
I have consistently observed that their scan time is an issue; sometimes with their AI-based scanning, when you triage that scan, the scan never completes or finishes, which makes it difficult.
AP
Sr. Project Analyst [Cybersecurity] at a consultancy with 10,001+ employees
Jun 21, 2026
Semgrep can be improved by making it more user-friendly.
reviewer2014131 - PeerSpot reviewer
DevSecOps Security Engineer at a manufacturing company with 10,001+ employees
May 31, 2026
I give Semgrep a six out of 10 simply because there are other tools that are better than this out there.
Find out what your peers are saying about Semgrep, SonarSource Sàrl, Snyk and others in Static Application Security Testing (SAST). Updated: May 2026.
900,644 professionals have used our research since 2012.
Francisco Javier Vergara - PeerSpot reviewer
SecOps Engineer at IriusRisk
Mar 20, 2026
However, as a tool it is really complex to maintain and to use, and it has a huge price tag.
Henry Mwawai - PeerSpot reviewer
Security Consultant | Application Security at Jowatechs
Sep 23, 2024
There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly.