|
Conclusion: Security Champions
|
Tanya Janca |
2024-09-11 |
404 |
--
|
|
Choosing a static analysis tool
|
Tanya Janca |
2024-09-18 |
843 |
--
|
|
New insight into backlogs, developer engagement, and security posture
|
Pablo Estrada |
2024-09-19 |
592 |
--
|
|
Easily create custom SAST guardrails with human language and Semgrep Assistant (AI)
|
Nitin Nayar |
2024-10-09 |
933 |
--
|
|
Driving enterprise adoption of AI code security with Semgrep Assistant
|
Chushi Li, Jack Moxon |
2024-10-24 |
717 |
--
|
|
Announcing Kotlin Reachability: Expanding the reach of Semgrep’s reachability
|
Kyle Kelly |
2024-10-28 |
552 |
--
|
|
Help us rename Semgrep OSS!
|
Luke O'Malley |
2024-11-01 |
414 |
--
|
|
Bringing Semgrep Managed Scanning to GitLab: automated code scanning at scale
|
Andy Huang |
2024-11-18 |
485 |
--
|
|
Semgrep Supply Chain announces dataflow reachability support for 10 languages
|
Misha Kuenstner, Cullen Harwood |
2024-12-03 |
877 |
--
|
|
Less effort, more insight: Introducing Dependency Graph for Supply Chain
|
Cullen Harwood, Aaron Acosta, Leif Dreizler |
2024-12-12 |
1,012 |
--
|
|
Important updates to Semgrep OSS
|
Luke O'Malley |
2024-12-13 |
629 |
2
|
|
Automating Security Workflows with the Semgrep Policy Management API
|
Jaweed Metz |
2025-01-15 |
557 |
--
|
|
Why AI-Powered Memories are the Future of SAST
|
Isaac Evans |
2025-01-22 |
825 |
--
|
|
How we built an AppSec AI that security researchers agree with 96% of the time
|
Jack Moxon, Seth Jaksik |
2025-01-22 |
1,916 |
--
|
|
Announcing an AI AppSec engineer that users agree with 95% of the time
|
Chushi Li |
2025-01-22 |
1,497 |
--
|
|
Series D announcement
|
Isaac Evans |
2025-02-05 |
920 |
--
|
|
5 Ways SAST and SCA help fintech companies innovate securely
|
Cullen Harwood |
2025-02-13 |
1,159 |
--
|
|
Beyond Benchmarks: How Semgrep Redefines Javascript Security
|
Milan Williams |
2025-02-25 |
589 |
--
|
|
Code to cloud noise reduction - Prioritizing code security with Semgrep & Wiz
|
Vivek Khimani, Andy Huang, Jaweed Metz |
2025-03-03 |
620 |
--
|
|
A Technical Deep Dive into Semgrep’s JavaScript Vulnerability Detection
|
Vasilii Ermilov |
2025-03-05 |
1,361 |
--
|
|
Take control of sensitive code without developer frustration
|
Jaweed Metz, Katie Kent |
2025-03-06 |
770 |
--
|
|
The Future of SaaS Security: AI-Driven, Fast, and Secure
|
Jaweed Metz |
2025-03-07 |
950 |
--
|
|
Upgrading Semgrep from OCaml 4 to OCaml 5
|
Nat Mote |
2025-03-12 |
2,495 |
7
|
|
🚨 Popular GitHub Action tj-actions/changed-files is compromised
|
Isaac Evans, Lewis Ardern, Kurt Boberg, Bence Nagy |
2025-03-14 |
931 |
282
|
|
London calling: Highlights from the 2025 cloud & cyber security expo
|
Jaweed Metz |
2025-03-18 |
1,626 |
--
|
|
Maturing Your Application Security Program Survey
|
Tanya Janca |
2025-03-28 |
254 |
--
|
|
Giving AppSec a Seat at the Vibe Coding Table
|
Chushi Li |
2025-04-02 |
579 |
--
|
|
Beyond vulnerabilities: Detect malicious dependencies in your supply chain
|
Misha Kuenstner, Pablo Estrada |
2025-04-09 |
667 |
--
|
|
AppSec for Builders: A Manifesto for the Future of Secure Code Development
|
Jaweed Metz |
2025-05-12 |
841 |
--
|
|
From idea to (secure) app: Semgrep + Replit
|
Chushi Li |
2025-05-15 |
479 |
2
|
|
Benchmarking Semgrep Community Edition Performance Improvements
|
Jayson DeLancey, Ben Kettle |
2025-06-05 |
661 |
--
|
|
Imagine zero false positive SAST
|
Chushi Li |
2025-06-12 |
851 |
4
|
|
Taming the elephant: Introducing reachability analysis for PHP
|
Pablo Estrada |
2025-06-24 |
427 |
--
|
|
Comparing Semgrep Community Edition and Semgrep Code for Static Analysis Sensitivity
|
Jayson DeLancey |
2025-06-26 |
881 |
--
|
|
Finding More Zero Days Through Variant Analysis
|
Eugene Lim |
2025-07-10 |
4,494 |
--
|
|
Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to Runtime
|
-- |
2025-07-29 |
535 |
--
|
|
Security Alert | NX Compromised to Steal Wallets and Credentials
|
Romain Gaucher, Jayson DeLancey, Lewis Ardern |
2025-08-27 |
1,750 |
493
|
|
Finding vulnerabilities in modern web apps using Claude Code and OpenAI Codex
|
Romain Gaucher, Vasilii Ermilov, Clint Gibler |
2025-09-02 |
3,610 |
13
|
|
Security Alert | chalk, debug and color on npm compromised in new supply chain attack
|
Katie Paxton-Fear |
2025-09-08 |
655 |
--
|
|
MCP: Model, Context… Propaganda? What security teams need to know about the latest hyped up AI tech
|
Katie Paxton-Fear |
2025-09-08 |
1,111 |
--
|
|
Our AI Assistant is handling 60% of incoming triage work for customers
|
Chushi Li, Rohit Jayaram |
2025-09-10 |
1,071 |
--
|
|
Security Advisory | NPM Packages Using Secret Scanning Tools to Steal Credentials
|
Jayson DeLancey |
2025-09-15 |
1,111 |
--
|
|
A Security Engineer's Guide to MCP
|
Kurt Boberg |
2025-09-29 |
2,560 |
7
|
|
Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly Scans
|
Braden Riggs |
2025-10-01 |
907 |
--
|
|
So the first malicious MCP server has been found on npm, what does this mean for MCP security?
|
Katie Paxton-Fear |
2025-10-02 |
1,509 |
--
|
|
Semgrep recognized in the 2025 Gartner® Magic Quadrant™ for Application Security Testing
|
Pablo Estrada |
2025-10-14 |
949 |
--
|
|
How Semgrep & StackHawk Help AppSec Teams Prioritize Real Risks
|
Jaweed Metz |
2025-10-22 |
548 |
--
|
|
7 Things We Learned from the EU’s Cybersecurity Threat Landscape 2050 Report
|
Katie Paxton-Fear |
2025-10-29 |
896 |
--
|
|
Can LLMs Detect IDORs? Understanding the Boundaries of AI Reasoning
|
Vasilii Ermilov |
2025-11-03 |
3,426 |
--
|
|
Through a Scanner Falsely: When AI-reported Critical Vulnerabilities Aren’t
|
Jonathan Werrett |
2025-11-04 |
818 |
--
|
