AI-generated code needs the same security scrutiny as any other code. Thanks to our new integration with Builder.io, Semgrep automatically catches and fixes vulnerabilities at generation time—helping teams ship fast and secure. Big thanks to the Builder.io team for making this possible!

An amazing first day in London at Gartner’s Security Summit! 🙌 From insightful conversations with CISOs, to learning about the latest security challenges facing European enterprises — this is why we love connecting with our community. 🔗 semgrep.dev/events/gartn...

🔍 Too many false positives slowing you down? Let Semgrep’s Assistant Memories take the guesswork out of triage. 🧠⚡ ✅ Learns from your feedback ✅ Filters smarter over time ✅ Keeps your team focused on the real issues See Assistant in action: semgrep.dev/events/video...

Vibe coding = faster builds, fewer blockers. 🚀 But speed means nothing without security. With Semgrep, developers get instant feedback on vulnerabilities, without leaving their flow. Less noise. More secure code. See how we’re redefining AppSec for AI development: semgrep.dev/solutions/se...

APIs are very strict in how you interact with them. It’s clear: it’s going to return JSON, it’s going to be RESTful, it’s going to be GRPC,i t’s the standard. 🔒 MCP, because it’s focused on tools and getting things done, is a little more flexible. 🧩

📅 Join @insider.phd as she explores the realities of AI’s impact on AppSec: 🔹 Moving past uncertainty to see where AI truly fits in. 🔹 Automating repetitive tasks and cutting false positives. 🔹 Strengthening security, improving accuracy, reducing risk. ➡️ semgrep.dev/events/doubt...

🚀 Vibe coding is redefining software development. AI copilots turn ideas into code in minutes,but is that code safe? With Semgrep, it is. Our AppSec platform delivers instant security guardrails for human and AI-generated code alike. 🔗 semgrep.dev/solutions/se...

A recent JetBrains survey found that 59% of developers are skeptical about AI’s ability to keep their code safe. Still, many are eager to harness AI, LLMs, and AI-native tools like our Semgrep MCP server to catch vulnerabilities and write more secure code. #AppSec #InfoSec #Cybersecurity #AI

Additional new npm packages were compromised yesterday, this time using secret scanning tools themselves in a post install script to gather and exfiltrate credentials. Additional details covered in updates to the Semgrep Security Research blog post: semgrep.dev/blog/2025/se...

DevOpsDays Denver is in full swing and the Semgrep team is live on-site! 🎉 It’s been amazing connecting with so many of you already, and we’re not done yet. ✨ Let’s keep the conversations going—see you out there! ✨ #DevOpsDaysRockies #Semgrep #AppSec #DevSecOps #Security #AI

Tired of security tools drowning your team in noise? Join us on September 17th at 10 AM PT to learn how Semgrep combines deterministic static analysis with LLMs and rich context to slash false positives and help you ship secure code faster. 🚀 🔗 Register now: cms.corp.semgrep.dev/events/break...

🚀 Experience the future of AppSec with Semgrep’s Assistant Memories See how your feedback transforms false positive triage in our interactive demo. 🔑 Smarter triage. ⚡ Faster fixes. 🛡️ Stronger security. 👉 See Assistant in action: semgrep.dev/events/video... #AppSec #DevSecOps #CyberSecurity

🚨 60% of SAST Findings — Gone Before You Ever See Them This year, Semgrep Assistant has been automatically triaging ~60% of SAST findings for our customers. When teams audit its decisions, they agree over 96% of the time. 🔗 Learn more: semgrep.dev/blog/2025/se...

🗣️ “I think it took me all of 5 minutes before I stopped thinking about security.” – Katie Paxton-Fear When you’re vibe coding, it’s easy to focus on the fun and forget about security. Drew Dennison and Katie Paxton-Fear explore how we can build apps that are secure by default.

AI copilots are turning ideas into working code faster than ever. But with that speed comes risk: is the code secure? 🔒 That’s where Semgrep comes in. Explore how we’re helping teams ship faster, cut through false positives, and secure the next era of development: semgrep.dev/solutions/se...

Tired of chasing false positives? Our interactive demo shows how Assistant learns from your feedback to filter smarter and help your team focus on what matters. ✨ Smarter false-positive triage ✨ Continuous learning from your input ✨ More time for real security work 👉 semgrep.dev/events/video...

AI agents are powerful tools, but they don’t have the full picture. Even as context windows grow, LLMs still lack key details about your app. The result? Code that looks solid on the surface can still introduce vulnerabilities. In the video below, learn why context matters when LLMs write code.

Last chance to register! 🚨 AI coding environments can supercharge speed, but are they secure? Join us tomorrow for a hands-on workshop on how Semgrep’s MCP server integrates with Cursor to deliver instant, actionable security feedback, right where you code. 🔗 semgrep.dev/events/from-...

🚀 Vibe coding is transforming development. AI copilots and natural language prompts turn ideas into code faster than ever—but speed without security is a risk. That’s why teams choose Semgrep. We’re the #1 AppSec platform for vibe coding, delivering real-time guardrails wherever code is created.

A cryptostealer malware was pushed to a number of npm packages including debug, chalk , and a number of utility packages as a result of the compromise of a single contributor. We published guidance for customers and non-customers for how to detect if you were affected: semgrep.dev/blog/2025/ch...

AI coding environments promise speed, but how do you make sure they’re also secure? Join Scott McBain this Wednesday, September 10th at 10:00 AM PT for a hands-on workshop showing how Semgrep’s MCP server integrates with Cursor to deliver instant, actionable feedback. 🔗 semgrep.dev/events/from-...

Vibe coding = faster builds, fewer blockers. 🚀 But speed means nothing without security. With Semgrep, developers get instant feedback on vulnerabilities, without leaving their flow. See how we’re redefining AppSec for AI-driven development: semgrep.dev/solutions/se...

⚡ Build fast. Fix faster. AI coding environments like Cursor speed up development, but what about security? On Sept 10 at 10 AM PT, join our live 40-min workshop to see how Semgrep MCP delivers instant, actionable security feedback right inside Cursor. 🔗 semgrep.dev/events/from-...

🚀 Experience the future of AppSec with Semgrep Assistant Memories! Watch how your feedback transforms false positive triage in our interactive demo. Assistant learns from your input, filters smarter, and helps your team focus on what really matters. semgrep.dev/events/video...

🇪🇸 Calling all Spanish-speaking security pros! 🇪🇸 LLMs won’t replace SAST anytime soon – but they can make it loads better. We’re chatting with Epicflare in Spanish on how layering AI post-processing on top of Semgrep scans can eliminate false positives. 📉 🔗 semgrep.dev/events/rewri...

🚀 From AI to Action: Fixing Vulnerabilities Faster with Semgrep in Cursor 🗓 Sept 10 | ⏰ 10:00 AM PT Speedy AI coding is great, secure AI coding is better. Join our workshop to see how Semgrep MCP integrates with Cursor, giving instant feedback on vulnerabilities. 🔗 semgrep.dev/events/from-...

🚀 Vibe coding is here and it’s transforming how software gets built. But with speed comes risk: is the code secure? That’s where Semgrep comes in. 🔗 Explore how we help teams ship faster, cut through false positives, and secure the next era of development: semgrep.dev/solutions/se...

☀️ Hacker Summer Camp 2025 was one for the books! Join our field researchers, Katie Paxton-Fear and Jayson DeLancey, as they reflect on their findings and share everything that happened. 📅 September 3, 2025 ⏰ 10:00 AM PT 🔗 Register here: semgrep.dev/events/secur...

🇪🇸 Webinar en español 16 de September 🇪🇸 AI is reshaping security in Spain & LATAM in some major ways, both positive and negative. Join our session with Epicflare to learn how combining static analysis with LLMs can reduce noise and help AppSec teams shift left. ⬅️ semgrep.dev/events/rewri...

Thousands of developers have been impacted by the nx supply chain attack. This blog is your playbook: how to check if your org is compromised, what to fix, and how to stay protected. Learn more in the blog: semgrep.dev/blog/2025/se...

🚀 Scaling AppSec with a small team? Wealthsimple shows how it’s done! With just 5 security engineers supporting 400+ developers, Semgrep’s helped them: ✅ Analyze 630+ findings ✅ Cut false positives by 62% ✅ Prevent 38 unnecessary PR comments 🔗 engineering.wealthsimple.com/how-were-mak...

🚀 There’s still time to save your seat! Join us tomorrow, August 27th at 10AM PT, for the Semgrep Summer ‘25 Release Webinar 🌞 Get the first look at: 🔹 Assistant Memories GA 🔹 Industry’s first reachability analysis for PHP 🔹 New platform features 🔗 Register now: semgrep.dev/events/summe...

🚨 Last chance to save your seat! 🚨 Join us on August 27 at 10:00 AM PT for the Semgrep Summer ’25 Release Webinar. ✔ Live demos of our newest features ✔ Roadmap sneak peeks & Q&A with product experts ✔ Your shot at winning a Millennium Falcon™ LEGO set 🔗 semgrep.dev/events/summe...

🚨 Last chance – Top 5 Security Metrics webinar Want to know which metrics really matter? Join us TOMORROW at 10am BST to learn: 🔷 5 essential metrics to start using today 🔷 Tying security work to business value 🔷 Metrics as a powerful advocacy tool Save your spot now: semgrep.dev/events/emea-...

Semgrep Summer ’25 Release Highlights! ☀️ Join Randall Westbrook on August 27th at 10AM PT for our live Summer Release Webinar to see what’s new! ✨ Plus: One lucky attendee will win a Millennium Falcon™ LEGO set! Save your seat 👉 semgrep.dev/events/summe... #AppSec #AI #DevSecOps #Infosec

The Semgrep team had an amazing time at CyberSecurity Summit Vancouver yesterday, connecting with the community and keeping the conversations going at our From Summit to Steakhouse dinner. 🥩✨ Want to connect with the team? Check out our events page to see where we’ll be next: semgrep.dev/events/

Security leaders – drowning in data, but still missing clarity? 🤔 Join Nitin Nayar for Tuesday’s webinar on "Top 5 Metrics for Effective Security Leadership" – for a practical approach to tracking health & long-term impact, based on insights from 50+ security leaders. 🔗 semgrep.dev/events/emea-...

🌟 Want to win a Millennium Falcon™ LEGO set? 🌟 Join us on August 27th at 10 AM PT for the Semgrep Summer ‘25 Release Webinar! Not only will you get a shot at the ultimate build, you’ll also see the latest from Semgrep. Register now: semgrep.dev/events/summe...

🚨 Last chance to register! 🚨 Join us tomorrow, August 20 at 1PM ET to see how Semgrep’s Model Context Protocol (MCP) server keeps security in the loop, giving your team real-time visibility and feedback as code is generated. Don’t miss it 👉 webinars.techstronglearning.com/secure-vibe-...

📊 Want to know which #SecurityMetrics actually matter? In next week’s webinar, Nitin Nayar shares 5 essential metrics you can use TODAY, tying your security work directly to business value – to level up your strategy and advocate powerfully. Secure your spot here: lnkd.in/ewjN7fJJ

AI is changing how code gets written, but is it secure? 🤔 Join us August 20 at 1PM ET to see how Semgrep’s Model Context Protocol (MCP) server brings security into the loop, giving your team real-time visibility and feedback as code is generated. 🔗 webinars.techstronglearning.com/secure-vibe-...

🚨 Last Chance to Register 🚨 Join Katie Paxton-Fear and Drew Dennison tomorrow, August 19th at 10AM PT as we dive into: ✨ What MCP servers really are, and if they’re hype or a game-changer for security 🛠 How MCP could level up your developer + security tooling semgrep.dev/events/mcp-m...

Recently, Clint Gibler was joined by Scott Behrens of Netflix for a deep dive into secure code review with Vibe Coding IDEs! Missed it? You can still: 🎥 Watch the full recording → semgrep.dev/events/video... 📂 Explore the Vibe Hacking GitHub repo → github.com/tldrsec/vibe...

This year at Hacker Summer Camp, one topic stole the spotlight: AI Agents, and the MCP (Model Context Protocol) servers that power them. 💻 Join us on Tuesday, August 19th at 10AM PT to learn what security teams need to know about the latest hyped up AI tech. 🔗 semgrep.dev/events/mcp-m...

Looking for measurable impact? 🧭 Join us August 26th at 11:00 CEST for our "Top 5 Metrics for Effective Security Leadership" webinar – as we look at tying security to business value, with metrics as our advocacy tool. Sign up for the session here: semgrep.dev/events/emea-... Hope to see you there!

⏰ We’re live in just 2 hours! ⏰ AI is everywhere in security marketing—but not all of it lives up to the hype. Join Milan Williams today at 12:00 pm PT for a practical, no-fluff session on evaluating AI-powered AppSec tools. 🔗 semgrep.dev/events/ai-me... #AppSec #Cybersecurity #Webinar

🚨 Last chance to register! 🚨 🤖 AI is everywhere in security marketing—but how much of it actually delivers value? Join Milan Williams tomorrow, August 13th at 12:00 pm PT for a webinar that cuts through the noise. 💡 Don’t miss out—secure your spot now: 🔗 semgrep.dev/events/ai-me...

As another Hacker Summer Camp rolls around, it seems all anyone could talk about is AI. 💻 Join Katie Paxton-Fear and Drew Dennison on Tuesday, August 19th at 10AM PT to learn what security teams need to know about the latest hyped up AI tech. 🔗 Register here: semgrep.dev/events/mcp-m...

📢 The July Semgrep release notes are live! 🔷 Windows native support (beta) 🔷 PHP reachability (GA) 🔷 uv package manager support 🔷 Assistant memory view 🔷 Improved AWS Secrets validation 📖 Read more: semgrep.dev/docs/release...

That’s a wrap on Black Hat 2025 🎤 From code-to-cloud demos and book signings to scavenger hunts, speaking sessions, and packed parties—we’ve loved every minute of it. We’re leaving Vegas with full notebooks, tired feet, and a ton of gratitude for this amazing community 💙