← AI tools directory

Hybrid · Coding

Semgrep

Static analysis for code; pairs well with LLM explanations of findings.

Best for: Code security triage for makers shipping firmware/apps

Pricing: Free OSS + cloud tiers

Official site All tools

Strengths

Fast local scans
Custom rules
CI friendly

Watch-outs

Not a full pentest
Noise needs triage

Appears in these stacks

Code security triage · primary — Static findings you can re-run in CI.
Open-source maintainer triage · supporting — Catch regressions in PRs.