Code security platform combining static analysis with AI-driven triage
Semgrep sells developer-embedded code security spanning SAST, supply chain and secrets scanning, built on an OCaml and Python core with OpenAI, Anthropic and Hugging Face in the stack, pointing to LLM-assisted detection and remediation. Job posts reveal a commercial overhaul: a shift from seat-based to consumption-based pricing, a redesigned deal approval flow, and a push to cut churn through adoption automation, all alongside senior-heavy engineering and sales hiring.
Semgrep is a San Francisco-based, privately held application security company founded in 2017, with 201–500 employees. Its platform scans source code, open-source dependencies and secrets, placing security checks inside the developer workflow. Detection pairs deterministic static analysis with AI reasoning for triage and fixes. The product integrates with CI/CD and source control systems such as GitLab, CircleCI, Jenkins, Buildkite, Subversion and Perforce. The company currently hires in the United States and Australia.
Semgrep's stack includes OCaml, Python, TypeScript, React, Flask, SQLAlchemy, PostgreSQL, Kubernetes on AWS, Datadog and OpenTelemetry, plus AI tooling from OpenAI, Anthropic and Hugging Face.
Yes. Hiring is accelerating and engineering is the largest focus, mostly senior and staff roles, with sales, legal, security and support openings across the United States and Australia.
Job posts point to a transition from seat-based to consumption-based pricing, along with a redesign of the deal approval process and deal desk workflows.
Other companies in the same industry, closest in size
Semgrep's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.