Articles from Semgrep

Semgrep, a leading code security company, today announced it has been named a Strong Performer in The Forrester Wave™: Agentic Development Security Tools, Q4 2026, receiving the highest possible score of 5 out of 5 in criteria including AI application flaws, developer experience, secrets detection and AI triage.

Semgrep, a leading code security company, today announced a deepened partnership with Replit to bring automated, real-time security analysis directly into the AI-native development workflow.

Semgrep, a leading code security company, announces Semgrep Agentic Workflows, a set of pre-built security detection pipelines that uncover business logic flaws, broken authorization and other vulnerabilities classes that both traditional scanners and AI-only tools routinely miss. Covering a broad range of vulnerability classes, Agentic Workflows combines AI reasoning with deterministic program analysis to help security teams find critical issues without adding more noise to their alert queues.

Semgrep, a leader in code security for builders, today announced the hire of Cathy Polinsky as Co-CTO and VP of Engineering. Polinsky brings more than two decades of engineering leadership experience at Yahoo!, Salesforce, Stitch Fix, Shopify, and DataGrail, including two prior CTO roles. At a moment when AI-generated code is flooding enterprise codebases faster than security teams can review it, Polinsky joins to scale the engineering organization built to change that.

Semgrep, a leading code security company, today announced Semgrep Multimodal, a system that combines AI reasoning with rule-based analysis for detection, triage, and remediation. Its detection finds up to 8x more true positives while cutting noise by 50% compared to foundation models alone, and has already discovered dozens of zero-days at customers. Multimodal is built on Semgrep Workflows, a framework for autonomous code security - using deterministic tools and AI so security teams can encode their processes once and scale them reliably across teams, repos, and the organization.

Semgrep, a leading code security company, today announced Semgrep Secure 2026, a one-day, inaugural keynote featuring insights on AI-powered detection on a foundation of deterministic, static analysis to surface vulnerabilities from traditional OWASP Top 10 and complex business logic flaws like IDORs and broken authentication that traditional SAST tools often miss. Attendees will also learn how to secure software in an environment where AI writes the majority of code and minimal human review occurs before deployment. The free event is on Wednesday, February 25, 2026 at 9am PT/12pm ET.