Semgrep
Semgrep is a Cloud & Application Security company founded in 2017 and based in San Francisco, United States. It has raised $204M in total funding, most recently a Series D in 2025.
Founded in 2017 by Isaac Evans, Drew Dennison, and Luke O'Malley, Semgrep grew out of an open-source static-analysis engine of the same name (originally created at Facebook) that lets engineers write lightweight, pattern-based rules to find bugs and security issues across many languages. The company built a commercial AppSec platform on that foundation, spanning SAST, software composition analysis, and secrets scanning, with an emphasis on speed, low false positives, and fitting into developer workflows. Semgrep raised a $100M Series D led by Menlo Ventures in February 2025, bringing total funding to roughly $204M, and has leaned into AI-assisted code security as machine-generated code proliferates.
Semgrep turned a popular open-source scanning engine into a developer-trusted AppSec platform, positioning it as a fast, customizable alternative to legacy SAST tools as AI-generated code raises the stakes for code security.
semgrep.dev ↗·Cloud & Application Security·
United States·private 
