GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitGitHub CodeQL vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | GitHub CodeQL | Semgrep Code |
|---|---|---|
| Purpose | CodeQL is a language and toolchain for code analysis that treats code as data. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.