nowfound

Dev tools · October 29, 2020

Semgrep

Find bugs and enforce code standards

Semgrep launched on October 29, 2020 with 7 votes, #1,271 of 4,018 launches that month and more than 50% of that year's launches. The site was still online in September 2026, 5 years on.

Visit semgrep.dev ↗Semgrep alternatives

What it does

A fast, open-source, code analysis tool that excels at expressing code standards — without complicated queries. Rules look just like code; no more wrestling with regexes. Includes 900+ rules and SaaS infra for use in your editor, at commit-time, or in CI.

An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.

Ready to move off legacy AppSec? The New Shift Program helps you switch from Checkmarx or Snyk . Catch, flag, and fix real vulnerabilities before they ship, powered by security that learns as you build. Unify SAST, SCA, and secrets scanning into one platform built for today’s software era. Lives where developers work, delivering fixes without breaking flow. Gives security teams visibility, control, and confidence. Industry-leading SAST, SCA, and secrets scanning in one high signal AppSec platform. Secure code as it’s written. Built-in guardrails guide safe fixes before code ships. AppSec teams triage 80% fewer false positives across SAST and SCA. Backlogs shrink, and engineering velocity…from semgrep.dev

Does a similar job

all alternatives →
  • SA
    Semgrep App2021 · ▲79

    https://semgrep.dev/products/semgrep-app Hi! I work on Semgrep, an open-source project (discussed on HN previously [0][1)]. We’re one of those companies that maintain an OSS tool and a web app, and then monetize by selling enterprise features on said web app. Our free web app just went through a major revamp (sort of like a v1.0 release) so this feels like the perfect time to share and hear what the HN crowd thinks! Let me start with some backstory on Semgrep. Our team, r2c, has been experimenting with various ways to help organizations step up their application security…

  • Compare Analysis Tools For Python, Ruby, C, PHP, Go2020 · analysis-tools.dev · ▲175

    Find static code analysis tools and linters for Java, JavaScript, PHP, Python, Ruby, C/C++, C#, Go, Swift, and more. All tools and linters are peer-reviewed by fellow developers to select the best tools available. Avoid bugs in production, outages on weekends, and angry customers.

  • CodeRabbit VS Code Extension2025 · coderabbit.ai · ▲344

    Free AI code reviews directly in the IDE

  • CodeStream Code Review2020 · ▲295

    Fast and easy code reviews you'll love, in your IDE.

  • I built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13

    I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…

  • Semlib – Semantic Data Processing2025 · github.com · ▲63

    Build data processing and data analysis pipelines that leverage the power of LLMs 🧠 - anishathalye/semlib

More dev tools this month

the category →
  • /dev/null▲481

    a social network for devs

    Dev tools · 2d ago · dev-null.sh

  • Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

    open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 27d ago · github.com

  • Reladraw – A diagram language where you decide where to place things▲411

    Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 25d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 22d ago · openbot.run

  • Talanoa▲341

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 20d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 28d ago · corespeed.io

Source: Product Hunt launch ↗

Launched alongside, October 2020

the whole month →