EVERYTHING XIAOMI
Get listed
Side by side

Infer vs Semgrep Code

Infer

6.7#5 in c and c++ static analysis toolsFree plan
Free planWebLinuxmacOSSelf-hosted
Visit

What both publish

FactInferSemgrep Code
InstallationInfer can be installed from binary releases, built from source, or run using Docker images.Official installation paths include Homebrew on macOS, pip on Windows and Linux, and a semgrep/semgrep Docker image on Linux.
IntegrationsInfer documents integrations for Buck, cmake, Gradle, Make, Maven, Xcodebuild, xctool, and compilation databases.Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ.
LanguagesThe documentation lists Java, C, C++, Objective-C, and Erlang; the latest release notes also describe Python and Swift frontends and an experimental Rust frontend.Semgrep lists support for more than 30 programming languages and frameworks for SAST and nine for SCA.
PurposeInfer is a static analysis tool that produces a list of potential bugs from Java or C/C++/Objective-C code.Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them.

Infer plans

  • Infer (free)Free

Semgrep Code plans

  • Free EditionFree
  • Teams Secrets$15 a month
  • Teams — Code$30 a month
  • Teams Code$30 a month
  • Teams Supply Chain$30 a month
  • EnterprisePriced on request

Pick Infer if…

Infer suits developers and teams who want static checks for supported languages before code ships, including in CI workflows. It is not suitable for Windows-native use, and it only analyzes files captured during compilation.

Pick Semgrep Code if…

Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.

Charts they share