Astrée
5.8#14 in c and c++ static analysis toolsLinuxWindows
VisitAstrée vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | Astrée | Semgrep Code |
|---|---|---|
| Founded | 1998 | 2017 |
| Headquarters | Saarbrücken, Germany | San Francisco, California, United States |
| Integrations | The maker describes CI/CD and DevOps integration, automatic AUTOSAR integration analysis from ARXML files, and a TargetLink coupling; release notes also mention an Astrée Jenkins plugin. | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. |
| Purpose | Astrée is a sound static analyzer designed to prove the absence of runtime errors and data races in C/C++ programs. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
Astrée plans
No prices published.
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick Astrée if…
It suits developers and safety-focused teams analyzing handwritten or generated C and mixed C/C++ code. Linux and Windows users can integrate analyses into automated workflows.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.