Security Code Scan
6.0#18 in sast toolsFree planFree planLinuxSelf-hostedWindows
VisitSecurity Code Scan vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | Security Code Scan | Semgrep Code |
|---|---|---|
| Detection | It detects patterns including SQL injection, cross-site scripting, CSRF, and XML external entity injection. | Its multimodal detection combines deterministic SAST for issues such as XSS and SQL injection with AI analysis for complex flaws such as IDOR and business logic vulnerabilities. |
| Integrations | The site lists GitHub and GitLab pipeline support, plus MSBuild and a stand-alone runner for custom integrations. | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. |
| Purpose | Security Code Scan is a static code analyzer for .NET that detects vulnerability patterns in C# and VB.NET. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
Security Code Scan plans
- Security Code ScanFree
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick Security Code Scan if…
Security Code Scan suits .NET developers who want vulnerability-pattern analysis during coding or in CI/CD pipelines. Teams can also tailor taint analysis settings to project needs.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.