Happy Thanksgiving from all of us at Semgrep! 🍂 We’re grateful for our community who push the boundaries of what’s possible in AppSec every day. Wishing everyone a joyful and restful holiday filled with good food, good company, and plenty to be thankful for. 💚

On December 16 at 9:00 AM PT, join @insider.phd (Semgrep) and Aubrey King (F5) for a live, unscripted conversation diving into some of the most debated topics in security today — including whether AI is actually helping security teams or just adding more noise. 🔗 semgrep.dev/events/unfil...

The Semgrep team has a packed week planned at AWS re:Invent, and we’d love for you to join us! 🎉 We’re teaming up with some of our incredible partners to bring you a lineup of great events and conversations you won’t want to miss. Check out our full schedule: 🔗 semgrep.dev/events/aws-r...

Join Semgrep and @stackhawk.bsky.social on December 10 at 10 AM PT to see how combining SAST + DAST helps teams focus on what’s actually exploitable and fix faster, with unified visibility, runtime validation, and AI-powered triage. 👉 semgrep.dev/events/sast-...

A new variant of the Shai-Hulud worm is now impacting 500+ npm packages, introducing not only large-scale secret exfiltration but a persistent GitHub Actions backdoor capable of executing code on self-hosted runners. 👉 Read the full analysis: semgrep.dev/blog/2025/di...

The Semgrep team is heading to Las Vegas! ✈️✨ We’ll be at AWS re:Invent from December 1st - 4th, and we can’t wait to meet you there. Stop by Booth #486 to meet the team, grab some great swag, and see how Semgrep helps engineering and security teams ship faster and stay secure. #AWSreinvent

We’ve launched the Private Beta of Semgrep’s AI-Powered Detection, which combines AI reasoning with the Semgrep Pro Engine for reliable detection of logic vulnerabilities. Early results: • 80% of teams found real IDORs • 3× higher precision than AI alone semgrep.dev/contact/prod...

Join Chushi Li and Mudita Khurana (Airbnb) on December 4th at 9:00 AM PT as they unpack: 🔐 Why this shift changes how we think about AppSec 🧠 What “decision quality” means for security agents 🚀 How to evaluate effectiveness in real-world environments 👉 Register here: semgrep.dev/events/measu...

In recent research, we found that common false-positive reduction techniques, like strict word boundaries and keyword dependencies are causing scanners to miss legitimate leaked tokens across GitHub, OpenAI, Anthropic, and more. Dive into the findings: cms.corp.semgrep.dev/blog/2025/se...

Earlier this week, the Semgrep team made our way to beautiful Banff, Alberta for the Banff Security Summit with Evolve Technology Partners! 🌄🔐 A huge thank you to everyone who stopped by our table, and a special shoutout to everyone who joined Jamie Reid’s talk! See you next time!

Join Jamie Reid tomorrow at 10:00 AM PT, as he breaks down how real teams are using Semgrep Memories to cut through noise, accelerate AppSec triage, and make smarter decisions with AI insights. 🎁 Bonus: Every attendee gets to pick a FREE piece of Semgrep swag! cms.corp.semgrep.dev/events/real-...

We’re excited to share a deeper look at how Squarespace strengthened its developer-first security program and scaled AppSec across thousands of repositories while maintaining the engineering velocity their teams rely on. 🗞️ Download the whitepaper: semgrep.dev/resources/sc...

Tomorrow’s the day! 🎉 Join us at 9 AM PT for our Autumn Release Highlights, and get a chance to win your very own R2-D2™ LEGO® Star Wars™ set! Don’t miss it — grab your spot now! 👉 semgrep.dev/events/semgr... #AppSec #InfoSec #Cybersecurity #AI

🚀 AI-powered detection Beta is live! We’ve opened a Private Beta on November 12th — it’s free, includes 300 scans/month during private beta, and gives your team early access to our PMs and product roadmap. 👉 Join the beta: semgrep.dev/contact/product-join-llm-detection-beta #AppSec #Infosec

We’ve got a packed lineup of webinars coming up, and you won’t want to miss them! 🔥 Check out the 🧵 to learn more. #AppSec #Cybersecurity #InfoSec #AI #Webinars

Last week was a busy one for the Semgrep team! 🚀 A huge thank you to everyone who joined us at the GuidePoint Executive Security Summit in Pinehurst, the Women in Security Executive Screening in Seattle, and our Putt-ing the "Fun" in Security mini-golf event. 🙌

AI-assisted code introduces new risk. Semgrep AI-powered detection helps you find it before attackers do. ⚡ Beta access now open → semgrep.dev/contact/product-join-llm-detection-beta

The Private Beta for AI-powered detection is officially open! If your team is using Semgrep Code or exploring AI-assisted development, this is your invite. 💡 Free during beta (300 scans/month) 🧩 Early access to our product team 🔗Join the beta: semgrep.dev/contact/product-join-llm-detection-beta

🗓️ On Nov 26, join @insider.phd and Aubrey King for a conversation about some of the most controversial ideas shaping our industry. No slides. No scripts. Just two security pros debating questions like: Are developers justified in tuning out security? 🔗 Register here: semgrep.dev/events/unfil...

We’re launching Semgrep AI-powered detection — a first-of-its-kind hybrid of deterministic scanning and AI that finds vulnerabilities like IDORs and business logic flaws that other tools miss. Our Private Beta opens today, and spots are limited. 👉 Learn more: www.prnewswire.com/news-release...

We’re taking over Holey Moley Golf Club in San Francisco on November 13th at 5:30 PM PT for a night of mini golf, great conversation, and good vibes. 🎉 Come unwind, meet the Semgrep team, and connect with fellow security pros, all while showing off your short game! 👉 semgrep.dev/events/putt-...

Tired of wasting time on false positives during AppSec triage? Join Jamie Reid on November 20 at 10:00 AM PT for Real-World Applications of Semgrep Memories: How Customers Are Using AI to Eliminate False Positives. 📅 Save your seat: semgrep.dev/events/real-...

🔐 MCPs are transforming how applications connect with AI, but are your MCP servers secure? The @owasp.org GenAI Security Project has released a new resource to help teams build safely with Model Context Protocol (MCP). 📘 Download the report: genai.owasp.org/resource/che...

What a great night after #DayOne of #SecureWorld Seattle! 🌐 Big thanks to everyone who joined the AppSec dinner we co-hosted with @semgrep.com and EVOTEK last night. Amazing food, even better conversations. 🥂 #SecureWorld #AppSec #DevSecOps

The Semgrep Community Edition (CE) Fall 2025 release is here with: ⚡ Up to 3× faster scans on large repos 💻 Native Windows support — no WSL required 🌍 Now runs on 500 million+ more machines 👉 Read the full blog: semgrep.dev/blog/2025/se... #Semgrep #AppSec #DevSecOps #OpenSource #SAST

Day 2 at SecureWorld Seattle is underway! 🚀 A huge thank-you to everyone who joined Semgrep, @stackhawk.bsky.social and EVOTEK last night for our Unwind & Dine dinner at La Mar Bellevue — great conversations, great company, and even better connections! #SecureWorld #AppSec #Semgrep #InfoSec

We’re officially underway at OWASP Global AppSec USA in Washington, DC! 🎯 A huge thank you to everyone who joined our in-person workshop with Palo Alto Networks last night! Stop by Booth #23 to see how Semgrep delivers low-noise code security for the AI era. Plus, enter our LEGO giveaway! 🧱✨

SecureWorld Seattle is in full swing! 🚀 Stop by the Semgrep booth to meet the team, grab some great swag, and enter for a chance to win our Back to the Future Time Machine LEGO set! See you soon! #SecureWorld #Seattle #AppSec #Semgrep

Happening today at #OWASP Global AppSec US! Join Palo Alto Networks + Semgrep at the Westin DC, Downtown for our Hands-on Interactive Workshop: Securing AI-Generated Code with Cortex by Palo Alto Networks & Semgrep. 🕔 5–7pm EST semgrep.dev/events/secur...

AI can reason, but can it secure? Our new research explores how LLMs handle IDOR detection. They find real flaws, but still need human judgment to scale securely. Read more 👉 semgrep.dev/blog/2025/ca... #AppSec #AI #Security

Still spending too much time chasing false positives? You’re not alone. Join us tomorrow, November 5th, at 10 AM PT, to learn how teams are cutting AppSec noise and shipping secure code faster. 👉 Register now to join live: semgrep.dev/events/break... #AppSec #InfoSec #Cybersecurity #AI

The Semgrep team had an incredible time at BSides Chicago connecting with so many in the security community! 🦩 🎉 A huge thank you to everyone who attended Kurt Boberg’s talk, stopped by our table to say hi, entered our LEGO giveaway, and learned how Semgrep helps security teams ship faster!

Recently, we hosted our 2025 Semgrep Customer Advisory Board! 🎉 Thank you to everyone who took the time to join us and share your insights. From roadmap sessions to sharing peer insights to a visit at our new office from Mayor Daniel Lurie- it was an action packed week!

The Semgrep team is heading to Seattle! ✈️ Stop by our booth at SecureWorld Nov 5-6, to meet the team and learn how Semgrep helps teams ship faster and stay secure! 🎟️ Use code SPONSWC2 for $75 off your conference pass! 👉 Get your tickets here: events.secureworld.io/details/seat... See you there!

🔐 Cyber threats in Europe aren’t slowing down; they’re evolving. The EU’s Cybersecurity Threat Landscape 2025 shows attackers converging, automating, and industrializing their methods, from AI-driven phishing to state-sponsored ransomware. Read more from @insider.phd 👉 semgrep.dev/blog/2025/7-...

Security tools keep promising “less noise,” yet your backlog says otherwise. Pure LLM security? Unreliable. Manual triage? A time sink. Join us on Nov 5th to learn how Semgrep helps security teams move faster by combining deterministic static analysis with LLMs. semgrep.dev/events/break...

We’re excited to share that we’ve been named to the 2026 #Cyber60 List, presented by Lightspeed, Fortune, and AWS Startups. It’s an honor to be recognized for our work on shaping the future of cybersecurity. 🎉 Learn more: www.prnewswire.com/news-release...

🚫 Stop AI code risks before they ship. Join Semgrep + Palo Alto Networks for a hands-on workshop on November 5 from 5–7pm EST at the Westin Downtown in Washington, D.C. during OWASP Global AppSec (no badge required). Save your spot: semgrep.dev/events/secur... #AppSec #InfoSec #DevSecOps

🇩🇪We’ll be touching down in Germany next week for BSides Berlin – taking place at CIC Berlin on Saturday 8th November. Come say hello and learn what AI-powered AppSec can do for you, and enter our prize draw to win a Mario Kart Lego set 🏎️ Hope to meet you there. Bis bald! bsides.berlin

This Halloween, join @insider.phd as we venture through the haunted corridors of global security regulations. From GDPR to PCI DSS 4.0, we’re ranking the scariest frameworks by how much they’ll make your team scream, or sigh in relief. 🗓️ Oct 30th, 2025 | ⏰ 8:00 AM PT semgrep.dev/events/secur...

Last week, we celebrated an exciting milestone, moving into our new office! 🎉 A highlight of the day was welcoming Daniel Lurie, Mayor of SF, and a few of our amazing customers for our ribbon-cutting ceremony; an incredible way to mark this next chapter! ✂️ 🥂 We can't wait to welcome you soon!

We’re excited to be part of @sysdig.com’s new Partner Integration Hub, connecting Semgrep’s code security insights with Sysdig’s runtime intelligence to give joint customers deeper visibility, faster remediation, and smarter context from code to cloud. www.businesswire.com/news/home/20...

🦩 Semgrep is heading to the Windy City for BSides Chicago! 🦩 Catch Kurt Boberg giving his talk, “MCP LFI in 30 Minutes (or Your Money Back)” on November 1st at 1 PM — you won’t want to miss it. 🎉 And don't forget to stop by our table to meet the team and dive into all things AppSec.

Join @insider.phd this Halloween for a chilling tour through the haunted corridors of global security regulations! 🗓️ October 30, 2025 ⏰ 8:00 AM PT | 3:00 PM GMT 🔗 semgrep.dev/events/secur... #CyberSecurity #Compliance #SecurityRulez #DataPrivacy #Halloween #Webinar

AI is accelerating software delivery, but also changing the AppSec threat model. Join @paloaltonetworks.com + @semgrep.com for a hands-on interactive workshop at OWASP Global AppSec US! 📍 Nov 5, 5–7pm EST | Westin DC, Downtown 👉 Register today. semgrep.dev/events/secur...

We’re bringing the AppSec community together for a night of mini golf, mingling, and good vibes at Holey Moley Golf Club in San Francisco! 🎉 📍 San Francisco, CA 🗓️ November 13, 2025 ⏰ 5:30 PM PT Spots are limited, RSVP now to secure your spot! 👉 semgrep.dev/events/putt-...

What a blast last night! 🎉 Huge thanks to everyone who joined Semgrep and Phoenix Security at the Dirty Birdie in Austin for our Code, Clubs, and Cocktails AppSec Happy Hour! 🥂 🏌‍♀️ We loved connecting with so many amazing members of the AppSec community.

The new @semgrep.com + @stackhawk.bsky.social integration automatically correlates SAST and DAST results, linking code-level findings with runtime validation. ⚡ The result: one unified vulnerability record that’s clear, actionable, and ready for triage. ✅ 🔗 semgrep.dev/blog/2025/sa...

🚨 Happening tomorrow! Join us for the Semgrep Community Edition (Fall Release) webinar. See what’s new, what’s faster, and what’s next. 🗓️ Oct 23 | 10 AM PT 💻 Cross-platform support, 2x faster scans, and more! 🔗 semgrep.dev/events/semgr... #Semgrep #AppSec #DevSecOps

Semgrep Managed Scanning (SMS) is changing how teams adopt and scale SAST, SCA, and Secrets detection. No CI/CD setup, no infrastructure headaches, just fast, reliable security at enterprise scale. Learn how SMS is saving organizations time and money: semgrep.dev/blog/2025/en...