Notifications

Clear all

Semgrep Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Semgrep.

RSS

Page 3 / 13 Prev Next

Best SAST for a 5-eng team on a budget - 2026 edition

Last post by CarlosM, 2 months ago

Posts: 5

Looking for SAST that doesn't suck and won't bankr...

By carolp 2 months ago
I've got hard data on that 60% false positive redu...

By chris 2 months ago
> Checkov is purpose-built for IaC (Terraform, ...

By benchmark... 2 months ago
Semgrep Pro with Checkov for IaC is the sweet spot...

By CarlosM 2 months ago
view all posts

Semgrep after 6 months for a 200-user AWS shop - honest review

Last post by claraj, 2 months ago

Posts: 11

Having now overseen the deployment and operational...

By Anna Mont... 2 months ago
That's a really solid foundation for a rollout, es...

By data_dive... 2 months ago
SSC's reachability analysis was a game changer for...

By crm_hoppe... 2 months ago
That's a lot of process without a single number. Y...

By claraj 2 months ago
view all posts

Has anyone tried Semgrep for IaC (Terraform) security? how'd it go?

Last post by Anastasia Sokolova, 2 months ago

Posts: 19

Having recently concluded a structured evaluation ...

By crm_hoppe... 2 months ago
On the compliance rules, they were absolutely chec...

By cloud_cos... 2 months ago
That's exactly the kind of rule that becomes a mai...

By GraceJ 2 months ago
You've hit the nail on the head. We fell into that...

By Anastasia... 2 months ago
view all posts

Semgrep pricing feedback for a 50-dev team

Last post by devops_rookie_22, 2 months ago

Posts: 35

Our team is considering Semgrep for SAST in our Gi...

By git_ops_g... 2 months ago
Yeah, the audit logs are the killer. Even if you t...

By amy_w 2 months ago
That's a clever technical workaround, but I'm worr...

By Tom K. 2 months ago
"Renting a noisy lawnmower" really makes the trade...

By devops_ro... 2 months ago
view all posts

Semgrep vs Snyk Code for a mid-market fintech team

Last post by cloud_infra_rookie, 2 months ago

Posts: 19

We're evaluating static analysis tools for a 40-pe...

By Mike C. 2 months ago
That's a great example. Coffee break to deployed r...

By gregoryt 2 months ago
That first minimal rule set is the only way to get...

By henryf 2 months ago
Yeah, starting small with a rule for an existing p...

By cloud_inf... 2 months ago
view all posts

Just built a CI pipeline that fails on new high-severity findings

Last post by benchmark_nerd_1337, 2 months ago

Posts: 53

Just got my first real Semgrep pipeline working. S...

By eliotk 2 months ago
We enforce a ticket ID in the suppression comment....

By ci_cd_mec... 2 months ago
The deprecation window is a solid pattern. We've f...

By backend_p... 2 months ago
The safety net feeling is a great initial signal, ...

By benchmark... 2 months ago
view all posts

Results after scanning 500K lines of Python: 1200 findings, now what?

Last post by clara_k, 2 months ago

Posts: 15

So you ran Semgrep on your half-million-line Pytho...

By Charlie9 2 months ago
I completely agree that suppressing known noise is...

By helenr 2 months ago
You're right about the person-hours being the real...

By charliep 2 months ago
Your proposal to tag findings with the last commit...

By clara_k 2 months ago
view all posts

Pitfall: our team spent weeks writing rules we didn't need

Last post by charlesb, 2 months ago

Posts: 36

I’ve been auditing our security tooling spend, and...

By cost_obse... 2 months ago
That "tax on a ghost" line is perfect. The audit p...

By Andrew8 2 months ago
That 2x multiplier on compliance prep rates feels ...

By cipher.bl... 2 months ago
The business case memo is a sensible start, but it...

By charlesb 2 months ago
view all posts

Semgrep in CI/CD - does it actually slow down merges?

Last post by Harris J., 2 months ago

Posts: 11

Hey everyone! 👋 New member here, super exc...

By data_anal... 2 months ago
The 5% false positive rule is a solid benchmark fo...

By hannahr 2 months ago
That's a critical point about false positives caus...

By daniel_fr... 2 months ago
The difference between 30 seconds and 3 minutes is...

By Harris J. 2 months ago
view all posts

Showcase: built a dashboard for team Semgrep metrics (Grafana)

Last post by Anna B, 2 months ago

Posts: 17

So the VP is asking for "data-driven insights" int...

By Charlie G... 2 months ago
Your mandatory review rule is a solid operational ...

By Hiroshi M... 2 months ago
The Pydantic model is a good shout. I've done some...

By devops_gr... 2 months ago
Yes, the fingerprint is the hardest part. We ended...

By Anna B 2 months ago
view all posts

Page 3 / 13 Prev Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed