Innovation is the spirit of SMBs, and code is its beating heart. With the right tools, devs and appsec can work together to keep your apps scalable and secure without friction. On Oct 15 @ 10 AM PT, join us to see how dev-first security keeps pace as you grow. semgrep.dev/events/start...

🎉 Big milestone alert: Semgrep Managed Scans (SMS) just crossed 1M weekly scans! With no CI/CD setup, no compute costs, and no overhead, enterprises are deploying SAST + SCA in minutes, not months. 👉 Read how we’re redefining enterprise-scale code scanning: semgrep.dev/blog/2025/en...

AI dominates today’s security conversations, but for many, hesitation and skepticism still stand in the way of adoption. Join @insider.phd, on October 16th at 10:00 AM PT, as she breaks down what AI really means for AppSec. 🔗 semgrep.dev/events/from-...

The latest npm supply chain attack targets the new frontier: AI agents. A malicious postmark-mcp server copied a legit GitHub repo, built trust over 15 versions, then added a payload to leak emails. In this blog post, we break down the 'postmark-mcp' incident: semgrep.dev/blog/2025/so...

🎉 That’s a wrap on SecTor! 🎉 A huge thank-you to everyone who stopped by the Booth, joined our roundtable dinners, and shared great conversations with the Semgrep team. From amazing networking to deep security discussions, this week has been incredible.

In our latest blog, we share how SMS can help you cut infrastructure costs with a simple guide to calculate your potential savings. ✅ No CI/CD setup ✅ No compute costs ✅ No overhead See why SMS is already processing 1M+ scans every week 👉 semgrep.dev/blog/2025/en...

You’ve heard the hype – vibe coding is here. With tools like Replit and Cursor, you can go from idea to deployed code in minutes. But with speed comes risk… 😱 Join @insider.phd for a webinar on 17th October at 10am BST to learn how to integrate security scans directly into your AI workflows.

Recently, Semgrep’s CPO & Co-founder, Luke O'Malley O’Malley, joined fellow industry leaders at the AWS Summit Los Angeles for an inspiring panel: Startups Breaking Boundaries: Reshaping Cybersecurity. A huge thank you to everyone who joined us. It was incredible to see such an engaged audience. 💡

🍽️ Huge thanks to everyone who joined Semgrep and XBOW for The Future of Application & Software Security Roundtable Dinner last night! It was an amazing evening of great food, drinks, and conversation. Today’s your final chance! Stop by booth #338 and enter to win a Gotham City LEGO set! 🦇✨

✨ Day 1 at SecTor was incredible! Thank you to everyone who stopped by the Semgrep booth, it was great meeting so many of you and sharing how Semgrep’s low-noise results and AI guidance can help you ship faster and reduce risk. We’ll be back at Booth #338 tomorrow, see you then! 👋

🚀 Curious about Semgrep Managed Scanning (SMS)? With SMS, you can start scanning your code in minutes, no CI/CD setup, no infrastructure to manage. In the short video below, we’ll show you how to connect repos, run full and diff scans, and get high-signal results fast. youtu.be/wxbTv6LBx4c?...

🍽️ Thank you to everyone who joined Semgrep and Oligo Security for our roundtable dinner to kick off SecTor week! It was a fantastic evening of great food, drinks, and networking with amazing community members!

Toronto, we’re ready for you! 🇨🇦🏙️ Heading to SecTor? Swing by booth #338 to learn how our low-noise results and AI guidance across SAST, SCA, and Secrets help you: ⚡️ Fix vulnerabilities early ⚡️ Speed up releases ⚡️ Reduce risk We can’t wait to meet you! #SecTor #AppSec #DevSecOps #Semgrep

Experience the future of AppSec with Semgrep’s Assistant Memories Tired of chasing false positives? Our interactive demo shows how Assistant learns from your feedback to filter smarter and help your team focus on what really matters. 👉 See assistant in action: semgrep.dev/events/video...

⏰Set your alarms for tomorrow 10am BST ⏰ We’ll be joining Dr Katie Paxton-Fear to explore the real impact of AI on AppSec… In this webinar, we’ll look to go from doubt to direction – moving beyond the hype to see how AI can be a trusted partner in security. 👉 semgrep.dev/events/doubt...

Innovation is the spirit of SMBs, and code is its beating heart. With the right tools, devs and appsec can work together to keep your apps scalable and secure without friction. On Oct 15 @ 10 AM PT, join us to learn how dev-first security keeps pace as you grow. 🔗 semgrep.dev/events/start...

AI copilots and natural language prompts are turning ideas into working code faster than ever. But with that speed comes risk: is the code secure? 🔒 That’s where Semgrep comes in. Explore how we’re helping teams ship faster and secure the next era of development: semgrep.dev/solutions/se...

🚀 The Semgrep team is heading to SecTor and we would love to meet you there! Swing by Booth #338 to discover how Semgrep’s low-noise results and AI-driven guidance across SAST, SCA, and Secrets help you: 🔹 Fix vulnerabilities earlier 🔹 Ship faster 🔹 Reduce risk

Giants Win! ⚾🎉 Last night, we teamed up with @stackhawk.bsky.social to welcome some amazing members of our community for the Giants vs. Cardinals game at Oracle Park. Great food, refreshing drinks, and even better company made it an evening to remember! Huge thanks to everyone who joined us! 🙌

Curious about Secure Vibe Coding? 🤔 Our latest webinar dives into practical ways to add real-time AI guardrails and keep development secure. 🔗 Watch the full recording here: semgrep.dev/events/video... #AppSec #InfoSec #Cybersecurity #AI

🚀 Vibe coding is here, and it’s rewriting the rules of software development. But speed without security? 😱 No thanks. That’s where Semgrep steps in. We’re the #1 AppSec platform for vibe coding, putting real-time security guardrails wherever code is created. 👉 semgrep.dev/solutions/se...

AI-generated code needs the same security scrutiny as any other code. Thanks to our new integration with Builder.io, Semgrep automatically catches and fixes vulnerabilities at generation time—helping teams ship fast and secure. Big thanks to the Builder.io team for making this possible!

An amazing first day in London at Gartner’s Security Summit! 🙌 From insightful conversations with CISOs, to learning about the latest security challenges facing European enterprises — this is why we love connecting with our community. 🔗 semgrep.dev/events/gartn...

🔍 Too many false positives slowing you down? Let Semgrep’s Assistant Memories take the guesswork out of triage. 🧠⚡ ✅ Learns from your feedback ✅ Filters smarter over time ✅ Keeps your team focused on the real issues See Assistant in action: semgrep.dev/events/video...

Vibe coding = faster builds, fewer blockers. 🚀 But speed means nothing without security. With Semgrep, developers get instant feedback on vulnerabilities, without leaving their flow. Less noise. More secure code. See how we’re redefining AppSec for AI development: semgrep.dev/solutions/se...

APIs are very strict in how you interact with them. It’s clear: it’s going to return JSON, it’s going to be RESTful, it’s going to be GRPC,i t’s the standard. 🔒 MCP, because it’s focused on tools and getting things done, is a little more flexible. 🧩

📅 Join @insider.phd as she explores the realities of AI’s impact on AppSec: 🔹 Moving past uncertainty to see where AI truly fits in. 🔹 Automating repetitive tasks and cutting false positives. 🔹 Strengthening security, improving accuracy, reducing risk. ➡️ semgrep.dev/events/doubt...

🚀 Vibe coding is redefining software development. AI copilots turn ideas into code in minutes,but is that code safe? With Semgrep, it is. Our AppSec platform delivers instant security guardrails for human and AI-generated code alike. 🔗 semgrep.dev/solutions/se...

A recent JetBrains survey found that 59% of developers are skeptical about AI’s ability to keep their code safe. Still, many are eager to harness AI, LLMs, and AI-native tools like our Semgrep MCP server to catch vulnerabilities and write more secure code. #AppSec #InfoSec #Cybersecurity #AI

Additional new npm packages were compromised yesterday, this time using secret scanning tools themselves in a post install script to gather and exfiltrate credentials. Additional details covered in updates to the Semgrep Security Research blog post: semgrep.dev/blog/2025/se...

DevOpsDays Denver is in full swing and the Semgrep team is live on-site! 🎉 It’s been amazing connecting with so many of you already, and we’re not done yet. ✨ Let’s keep the conversations going—see you out there! ✨ #DevOpsDaysRockies #Semgrep #AppSec #DevSecOps #Security #AI

Tired of security tools drowning your team in noise? Join us on September 17th at 10 AM PT to learn how Semgrep combines deterministic static analysis with LLMs and rich context to slash false positives and help you ship secure code faster. 🚀 🔗 Register now: cms.corp.semgrep.dev/events/break...

🚀 Experience the future of AppSec with Semgrep’s Assistant Memories See how your feedback transforms false positive triage in our interactive demo. 🔑 Smarter triage. ⚡ Faster fixes. 🛡️ Stronger security. 👉 See Assistant in action: semgrep.dev/events/video... #AppSec #DevSecOps #CyberSecurity

🚨 60% of SAST Findings — Gone Before You Ever See Them This year, Semgrep Assistant has been automatically triaging ~60% of SAST findings for our customers. When teams audit its decisions, they agree over 96% of the time. 🔗 Learn more: semgrep.dev/blog/2025/se...

🗣️ “I think it took me all of 5 minutes before I stopped thinking about security.” – Katie Paxton-Fear When you’re vibe coding, it’s easy to focus on the fun and forget about security. Drew Dennison and Katie Paxton-Fear explore how we can build apps that are secure by default.

AI copilots are turning ideas into working code faster than ever. But with that speed comes risk: is the code secure? 🔒 That’s where Semgrep comes in. Explore how we’re helping teams ship faster, cut through false positives, and secure the next era of development: semgrep.dev/solutions/se...

Tired of chasing false positives? Our interactive demo shows how Assistant learns from your feedback to filter smarter and help your team focus on what matters. ✨ Smarter false-positive triage ✨ Continuous learning from your input ✨ More time for real security work 👉 semgrep.dev/events/video...

AI agents are powerful tools, but they don’t have the full picture. Even as context windows grow, LLMs still lack key details about your app. The result? Code that looks solid on the surface can still introduce vulnerabilities. In the video below, learn why context matters when LLMs write code.

Last chance to register! 🚨 AI coding environments can supercharge speed, but are they secure? Join us tomorrow for a hands-on workshop on how Semgrep’s MCP server integrates with Cursor to deliver instant, actionable security feedback, right where you code. 🔗 semgrep.dev/events/from-...

🚀 Vibe coding is transforming development. AI copilots and natural language prompts turn ideas into code faster than ever—but speed without security is a risk. That’s why teams choose Semgrep. We’re the #1 AppSec platform for vibe coding, delivering real-time guardrails wherever code is created.

A cryptostealer malware was pushed to a number of npm packages including debug, chalk , and a number of utility packages as a result of the compromise of a single contributor. We published guidance for customers and non-customers for how to detect if you were affected: semgrep.dev/blog/2025/ch...

AI coding environments promise speed, but how do you make sure they’re also secure? Join Scott McBain this Wednesday, September 10th at 10:00 AM PT for a hands-on workshop showing how Semgrep’s MCP server integrates with Cursor to deliver instant, actionable feedback. 🔗 semgrep.dev/events/from-...

Vibe coding = faster builds, fewer blockers. 🚀 But speed means nothing without security. With Semgrep, developers get instant feedback on vulnerabilities, without leaving their flow. See how we’re redefining AppSec for AI-driven development: semgrep.dev/solutions/se...

⚡ Build fast. Fix faster. AI coding environments like Cursor speed up development, but what about security? On Sept 10 at 10 AM PT, join our live 40-min workshop to see how Semgrep MCP delivers instant, actionable security feedback right inside Cursor. 🔗 semgrep.dev/events/from-...

🚀 Experience the future of AppSec with Semgrep Assistant Memories! Watch how your feedback transforms false positive triage in our interactive demo. Assistant learns from your input, filters smarter, and helps your team focus on what really matters. semgrep.dev/events/video...

🇪🇸 Calling all Spanish-speaking security pros! 🇪🇸 LLMs won’t replace SAST anytime soon – but they can make it loads better. We’re chatting with Epicflare in Spanish on how layering AI post-processing on top of Semgrep scans can eliminate false positives. 📉 🔗 semgrep.dev/events/rewri...

🚀 From AI to Action: Fixing Vulnerabilities Faster with Semgrep in Cursor 🗓 Sept 10 | ⏰ 10:00 AM PT Speedy AI coding is great, secure AI coding is better. Join our workshop to see how Semgrep MCP integrates with Cursor, giving instant feedback on vulnerabilities. 🔗 semgrep.dev/events/from-...

🚀 Vibe coding is here and it’s transforming how software gets built. But with speed comes risk: is the code secure? That’s where Semgrep comes in. 🔗 Explore how we help teams ship faster, cut through false positives, and secure the next era of development: semgrep.dev/solutions/se...

☀️ Hacker Summer Camp 2025 was one for the books! Join our field researchers, Katie Paxton-Fear and Jayson DeLancey, as they reflect on their findings and share everything that happened. 📅 September 3, 2025 ⏰ 10:00 AM PT 🔗 Register here: semgrep.dev/events/secur...

🇪🇸 Webinar en español 16 de September 🇪🇸 AI is reshaping security in Spain & LATAM in some major ways, both positive and negative. Join our session with Epicflare to learn how combining static analysis with LLMs can reduce noise and help AppSec teams shift left. ⬅️ semgrep.dev/events/rewri...