Horusec
6.6#5 in static application security testing sastFree planFree planWebAPIExtensionLinux
VisitHorusec vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | Horusec | Semgrep Code |
|---|---|---|
| Developer workflow | Developers can use Horusec through its CLI, while DevSecOps teams can use it in CI/CD pipelines. | The integrations page lists VS Code and IntelliJ IDE extensions, and Slack, email, and webhooks for notifications. |
| Languages | It analyzes C#, Java, Kotlin, Python, Ruby, Golang, Terraform, JavaScript, TypeScript, Kubernetes, PHP, C, HTML, JSON, Dart, Elixir, Shell and Nginx. | Semgrep lists support for more than 30 programming languages and frameworks for SAST and nine for SCA. |
| Purpose | Horusec performs static code analysis to identify security flaws during development. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
Horusec plans
- Open sourceFree
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick Horusec if…
Horusec suits developers and DevSecOps teams seeking source analysis through a CLI, editor extension or CI/CD pipeline. Its web platform may be relevant to teams managing vulnerability findings, though its repository is archived and read-only.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.