
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
Visit
| Fact | Semgrep Code | TrustInSoft Analyzer |
|---|---|---|
| API | The pricing comparison lists a REST API for Teams and Enterprise plans, and the product page describes connecting the API to security dashboards or alerting tools. | A 2025 release announcement describes a REST API for accessing analysis results, code locations, evaluation data, and coverage metrics as structured JSON. |
| Founded | 2017 | 2013 |
| Headquarters | San Francisco, California, United States | Paris, France, with a San Francisco, USA office |
| Integrations | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. | The maker lists integrations with Jenkins, GitLab CI, and AWS CodePipeline. |
| Languages | Semgrep lists support for more than 30 programming languages and frameworks for SAST and nine for SCA. | The maker describes Analyzer support for C, C++, and Rust. |
| Purpose | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. | TrustInSoft Analyzer uses exhaustive static analysis and formal methods to detect memory safety issues and runtime errors in source code. |
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.
Analyzer is aimed at safety- and security-minded teams in critical, automotive, telecom, IoT, and semiconductor industries.