Semgrep Headlines
Latest news and coverage for Semgrep
Recent Headlines
35 headlinesDEV Community (dev.to)
I'm Building a Code Security Analyzer. A Security Tool Found a Critical In It.
A developer shares how Semgrep found a critical vulnerability in his own security analyzer, highlighting Semgrep's effectiveness.
DEV Community (dev.to)
What I found when I security-scanned 10 AI-built apps (and how to check yours manually) - DEV Community
The author scanned 10 AI-built apps with Semgrep and found multiple vulnerabilities, discussing the importance of security scanning.
TipRanks
Semgrep Leans Into AI-Driven AppSec, Reachability Analysis, and Conference Visibility - TipRanks.com
Semgrep is focusing on AI-driven AppSec, reachability analysis, and conference visibility, promoting workshops and highlighting its role in AI-assisted development.
Programming Insider
Best Semgrep Alternatives in 2026: Top 5 SAST, SCA, and AppSec Platforms Compared - Programming Insider
An article comparing Semgrep with alternatives like Aikido Security, discussing strengths and weaknesses.
GovInfoSecurity
Mastra AI Framework Poisoned in npm Supply-Chain Attack
Hackers poisoned Mastra AI framework npm packages in a supply-chain attack, compromising over 140 packages with a malicious dependency that steals credentials and crypto wallets.
TipRanks
Semgrep Leans on AWS, Infosecurity Europe, and Product Automation to Bolster App-Sec Positioning - TipRanks.com
Semgrep highlighted its go-to-market momentum through AWS summits, Infosecurity Europe, and a Summer '26 Release Webinar to bolster its application security positioning.
DEV Community
AI Security Scanning Tools in 2026: Snyk vs Semgrep vs OX Security — Real False-Positive Rates Tested
A comparison of AI security scanning tools including Semgrep, testing false-positive rates and auto-remediation on real codebases.
DEV Community
I benchmarked Python AI-app security scanners. Here's what each catches.
A benchmark of security scanners including Semgrep, comparing detection rates on Python AI app vulnerabilities.
Augment Code
8 AI SAST Tools for 2026 Tested and Compared | Augment Code
This article compares eight AI SAST tools including Semgrep, highlighting its strengths in CI speed and custom rule authoring.
CyberPress
Top 10 Best SAST (Static Application Security Testing) Tools In 2026
Semgrep is featured as one of the top 10 SAST tools in 2026, with a detailed description of its features and capabilities.
UNDERCODE NEWS
A Dark Web Threat Actor Claims Qilin Ransomware Hit Semgrep Operations in the United States
A dark web threat actor claims that the Qilin ransomware group has attacked Semgrep's US operations, causing disruption and potential data compromise.
DryRun Security
Top 10 AI SAST Tools for 2026 and How to Enforce Code Policy in Agentic Coding Workflows
This article lists and compares top AI SAST tools including Semgrep, ranking it among the best for custom rule writing.
Infosecurity Magazine
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem - Infosecurity Magazine
Infosecurity Magazine article about a supply chain attack on npm packages quotes Semgrep CEO Isaac Evans on the structural trust issues in dependencies, providing expert commentary from Semgrep.
Semgrep
Getting Ready for Mythos with Semgrep
Semgrep announces new AI security rulesets, Guardian plugin for AI coding agents, Autofix beta, and performance improvements to help teams prepare for the Mythos threat.
Global Security Mag
Everything You Need to Know About Opengrep
Opengrep, a community-driven fork of Semgrep, is launched in response to Semgrep's licensing changes, with backing from multiple security vendors.
The Bakersfield Californian
Semgrep Hires Veteran Engineering Leader Cathy Polinsky as Co-CTO and VP of Engineering to Secure the Era of AI-Generated Code | News | bakersfield.com
Semgrep hired Cathy Polinsky as Co-CTO and VP of Engineering to address security challenges of AI-generated code.
BusinessWire
Semgrep Hires Veteran Engineering Leader Cathy Polinsky as Co-CTO and VP of Engineering to Secure the Era of AI-Generated Code
Semgrep hires Cathy Polinsky as Co-CTO and VP of Engineering to scale engineering for AI-generated code security.
HITLoop
AI-Assisted Code Security: Anthropic’s Claude Security
Article discusses Claude Security and cites a Semgrep study on false positive rates.
AppSec Santa
OpenGrep vs Semgrep (2026): Fork vs Upstream Comparison
A detailed comparison between OpenGrep, the community fork of Semgrep CE, and Semgrep's commercial AppSec Platform, covering feature differences, licensing, and use cases.
DEV Community
Stop merging vulnerable API code — automate PR security gates with Semgrep + Claude AI
A developer demonstrates using Semgrep and Claude AI to automatically block vulnerable pull requests.
TipRanks
Semgrep – Weekly Recap - TipRanks.com
TipRanks summarized Semgrep’s recent focus on securing AI-assisted development workflows, including integrations with coding tools and advisory rules for AI-related supply-chain threats. The article frames these developments in terms of Semgrep’s DevSecOps market positioning.
TipRanks
Semgrep Targets AI-Assisted Development With Integrated Security Plugins
Semgrep emphasizes security risks in AI-assisted coding and promotes its plugins and MCP integration.
Tessl
Replit launches “Security Agent” to scan and fix vulnerabilities in AI-built apps
Replit's Security Agent uses Semgrep and HoundDog.ai for hybrid vulnerability scanning.
Replit
Replit — Meet Replit Security Agent
Replit introduces Security Agent that uses Semgrep and HoundDog.ai for vulnerability scanning.
Semgrep Blog
Semgrep chosen to be part of OpenAI's Trusted Access for Cyber Program
Semgrep was selected as one of four initial recipients of OpenAI's Cybersecurity Grant Program, receiving a share of $10 million in API credits to advance application security tooling. The selection gives Semgrep early access to frontier AI models with stronger cyber reasoning capabilities.
COSS Weekly Newsletter
Stay up to date with the latest news, funding rounds, and announcements from the COSS universe.
Check out COSS Weekly on the webLatest Content from Chinstrap Community
View allCOSS Weekly – Week of July 27, 2026
This week in COSS: On the funding front, Databricks raised $3 billion at a $188 billion valuation, e...
COSS Weekly – Week of July 20, 2026
This week in COSS: Nous Research, the startup behind the OSS Hermes agent, is in talks to raise mew ...
Battle of the Software Acronyms: BYOC Is Beating SaaS, but the Winner is COSS
On June 15, 2026, Ververica, a company founded by the original creators of the open source Apache Fl...
COSS Weekly – Week of July 13, 2026
This week in COSS: Ollama raises a $65M Series B, Bespoke Labs announces a $40M Seed and Series A, a...
COSS Weekly – Week of July 6, 2026
This week in COSS: Together AI announced an $800M Series C to accelerate the shift to open-source AI...
COSS Weekly – Week of June 29, 2026
This week in COSS: The acquisition trend continued as Qualcomm agreed to acquire Modular for nearly ...
COSS Weekly – Week of June 22, 2026
This week in COSS: Databricks reported annualized revenue of $6.9 billion — up over 80% year-over-ye...
COSS Weekly – Week of June 15, 2026
This week in COSS: The recent flurry of COSS M&A activity continues as VoidZero was acquired by Clou...

