|
Detect Open Source Malware Attacks with Semgrep Supply Chain
|
Nabeel Saeed |
2025-12-02 |
1,709 |
--
|
|
Protect Against Open Source Malware Attacks with Semgrep Supply Chain
|
Nabeel Saeed |
2025-12-02 |
1,709 |
--
|
|
What a Hackathon Reveals About AI Agent Trends to Expect in 2026
|
Jayson DeLancey, Braden Riggs |
2025-11-25 |
1,340 |
--
|
|
Sha1-Hulud: The Second Coming of the NPM Worm is Digging For Secrets
|
Katie Paxton-Fear, Pieter De Cremer |
2025-11-24 |
4,113 |
--
|
|
Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAway
|
Lewis Ardern |
2025-11-19 |
2,502 |
--
|
|
Security Regulations: From Scary Stories to Strategic Advantage
|
Katie Paxton-Fear |
2025-11-18 |
1,400 |
--
|
|
Boosting Security Scan Performance for Monorepos with Multicore Parallel Processing
|
Jayson DeLancey |
2025-11-11 |
1,114 |
--
|
|
Catching IDORs, Broken Authorization, and Other Logic Issues with Semgrep AI-Powered Detection
|
Jack Moxon |
2025-11-11 |
871 |
--
|
|
Five Considerations When Building Cross-Platform Tools for Windows and macOS
|
Jayson DeLancey, Nat Mote |
2025-11-07 |
1,059 |
--
|
|
Semgrep Community Edition Fall Release 2025
|
Jaweed Metz, Milan Williams |
2025-11-06 |
535 |
--
|
|
Through a Scanner Falsely: When AI-reported Critical Vulnerabilities Aren’t
|
Jonathan Werrett |
2025-11-04 |
818 |
--
|
|
Can LLMs Detect IDORs? Understanding the Boundaries of AI Reasoning
|
Vasilii Ermilov |
2025-11-03 |
3,426 |
--
|
|
7 Things We Learned from the EU’s Cybersecurity Threat Landscape 2050 Report
|
Katie Paxton-Fear |
2025-10-29 |
896 |
--
|
|
How Semgrep & StackHawk Help AppSec Teams Prioritize Real Risks
|
Jaweed Metz |
2025-10-22 |
548 |
--
|
|
Semgrep recognized in the 2025 Gartner® Magic Quadrant™ for Application Security Testing
|
Pablo Estrada |
2025-10-14 |
949 |
--
|
|
So the first malicious MCP server has been found on npm, what does this mean for MCP security?
|
Katie Paxton-Fear |
2025-10-02 |
1,509 |
--
|
|
Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly Scans
|
Braden Riggs |
2025-10-01 |
907 |
--
|
|
A Security Engineer's Guide to MCP
|
Kurt Boberg |
2025-09-29 |
2,560 |
7
|
|
Security Advisory | NPM Packages Using Secret Scanning Tools to Steal Credentials
|
Jayson DeLancey |
2025-09-15 |
1,111 |
--
|
|
Our AI Assistant is handling 60% of incoming triage work for customers
|
Chushi Li, Rohit Jayaram |
2025-09-10 |
1,071 |
--
|
|
Security Alert | chalk, debug and color on npm compromised in new supply chain attack
|
Katie Paxton-Fear |
2025-09-08 |
655 |
--
|
|
MCP: Model, Context… Propaganda? What security teams need to know about the latest hyped up AI tech
|
Katie Paxton-Fear |
2025-09-08 |
1,111 |
--
|
|
Finding vulnerabilities in modern web apps using Claude Code and OpenAI Codex
|
Romain Gaucher, Vasilii Ermilov, Clint Gibler |
2025-09-02 |
3,610 |
13
|
|
Security Alert | NX Compromised to Steal Wallets and Credentials
|
Romain Gaucher, Jayson DeLancey, Lewis Ardern |
2025-08-27 |
1,750 |
493
|
|
Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to Runtime
|
-- |
2025-07-29 |
535 |
--
|
|
Finding More Zero Days Through Variant Analysis
|
Eugene Lim |
2025-07-10 |
4,494 |
--
|
|
Comparing Semgrep Community Edition and Semgrep Code for Static Analysis Sensitivity
|
Jayson DeLancey |
2025-06-26 |
881 |
--
|
|
Taming the elephant: Introducing reachability analysis for PHP
|
Pablo Estrada |
2025-06-24 |
427 |
--
|
|
Imagine zero false positive SAST
|
Chushi Li |
2025-06-12 |
851 |
4
|
|
Benchmarking Semgrep Community Edition Performance Improvements
|
Jayson DeLancey, Ben Kettle |
2025-06-05 |
661 |
--
|
|
From idea to (secure) app: Semgrep + Replit
|
Chushi Li |
2025-05-15 |
479 |
2
|
|
AppSec for Builders: A Manifesto for the Future of Secure Code Development
|
Jaweed Metz |
2025-05-12 |
841 |
--
|
|
Beyond vulnerabilities: Detect malicious dependencies in your supply chain
|
Misha Kuenstner, Pablo Estrada |
2025-04-09 |
667 |
--
|
|
Giving AppSec a Seat at the Vibe Coding Table
|
Chushi Li |
2025-04-02 |
579 |
--
|
|
Maturing Your Application Security Program Survey
|
Tanya Janca |
2025-03-28 |
254 |
--
|
|
London calling: Highlights from the 2025 cloud & cyber security expo
|
Jaweed Metz |
2025-03-18 |
1,626 |
--
|
|
🚨 Popular GitHub Action tj-actions/changed-files is compromised
|
Isaac Evans, Lewis Ardern, Kurt Boberg, Bence Nagy |
2025-03-14 |
931 |
282
|
|
Upgrading Semgrep from OCaml 4 to OCaml 5
|
Nat Mote |
2025-03-12 |
2,495 |
7
|
|
The Future of SaaS Security: AI-Driven, Fast, and Secure
|
Jaweed Metz |
2025-03-07 |
950 |
--
|
|
Take control of sensitive code without developer frustration
|
Jaweed Metz, Katie Kent |
2025-03-06 |
770 |
--
|
|
A Technical Deep Dive into Semgrep’s JavaScript Vulnerability Detection
|
Vasilii Ermilov |
2025-03-05 |
1,361 |
--
|
|
Code to cloud noise reduction - Prioritizing code security with Semgrep & Wiz
|
Vivek Khimani, Andy Huang, Jaweed Metz |
2025-03-03 |
620 |
--
|
|
Beyond Benchmarks: How Semgrep Redefines Javascript Security
|
Milan Williams |
2025-02-25 |
589 |
--
|
|
5 Ways SAST and SCA help fintech companies innovate securely
|
Cullen Harwood |
2025-02-13 |
1,159 |
--
|
|
Series D announcement
|
Isaac Evans |
2025-02-05 |
920 |
--
|
|
Why AI-Powered Memories are the Future of SAST
|
Isaac Evans |
2025-01-22 |
825 |
--
|
|
How we built an AppSec AI that security researchers agree with 96% of the time
|
Jack Moxon, Seth Jaksik |
2025-01-22 |
1,916 |
--
|
|
Announcing an AI AppSec engineer that users agree with 95% of the time
|
Chushi Li |
2025-01-22 |
1,497 |
--
|
|
Automating Security Workflows with the Semgrep Policy Management API
|
Jaweed Metz |
2025-01-15 |
557 |
--
|
|
Important updates to Semgrep OSS
|
Luke O'Malley |
2024-12-13 |
629 |
2
|
