Semgrep Alternatives

Apps similar to Semgrep include SonarQube, which is open source with a free version. Other options are Codacy, Shellcheck, Cppcheck and Coverity Scan. Code Reviews like Semgrep are a crowded field, with more than 25 alternatives for the web, Windows, Linux, Mac and self-hosting.

More about Semgrep
Copy a direct link to this comment to your clipboard
Alternatives
Semgrep alternatives page was last updated

Alternatives list

  1. SourceMonitor icon

    SourceMonitor

     Like

    The freeware program SourceMonitor lets you see inside your software source code to find out how much code you have and to identify the relative complexity of your modules.

    Cost / License

    • Free
    • Proprietary

    Platforms

    • Windows
    SourceMonitor screenshot 1
    Good alternative?
     
  2. Keelscan icon

    Keelscan

     Like

    Examines codebases for secrets, dependency risks, and unsafe API keys, checks running apps for TLS and security headers, and analyzes Supabase, Firebase, and Firestore configs for exposure—then provides a single grade, report, and actionable fixes.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    • Software as a Service (SaaS)
    • BE flagBelgium
    • European Union flagEU
    Code scan report: one A-F posture grade, compliance readiness for SOC 2 and HIPAA control areas, and a Trust page you can publish at a public URL to send buyers who ask "is your app secure?
    Good alternative?
     
You are at page 4 of Semgrep alternatives