OpenGrep
7.3#3 in static application security testing softwareFree planFree planAPILinuxmacOSSelf-hosted
VisitOpenGrep vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | OpenGrep | Semgrep Code |
|---|---|---|
| Company size | LinkedIn lists Opengrep as a nonprofit software-development organization with company size of one employee. | LinkedIn lists Semgrep as a privately held company with 201–500 employees. |
| Installation | The official installer supports Linux and macOS through install.sh and Windows through PowerShell install.ps1. | Official installation paths include Homebrew on macOS, pip on Windows and Linux, and a semgrep/semgrep Docker image on Linux. |
| Integrations | The repository documents a CI subcommand, and its output formats include JSON and SARIF. | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. |
| Purpose | OpenGrep is an open-source static code analysis engine for finding security issues and searching code patterns. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
OpenGrep plans
- OpenGrepFree
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick OpenGrep if…
OpenGrep suits developers and organizations looking for a free static analysis engine they can run in their own environment. Existing Semgrep rule users can apply those rules without changes.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.