Semgrep Guardian goes self-serve with Codex support, plus incident-first advisories and transitive Autofix. See everything ...

One Brotli decoder bug. A lot of copies. TL;DR - CVE-2026-111497 is an out-of-bounds write in the Brotli decompressor in google/brotli, fixed upstream in 1.2.1. It is not a separate Node, PHP, or npm ...

Semgrep is sponsoring our friends at OWASP Netherlands Chapter's next meetup – taking place on 29th October at KvK HQ, Utrecht. We're looking forward to catching up with the Dutch AppSec community!

Forrester has named Semgrep a Strong Performer in the first edition of The Forrester Wave™: Agentic Development Security ...

Visit us in booth #D3 for custom live demos and to learn how Semgrep’s low-noise results and AI guidance across SAST, SCA, and Secrets can help you fix vulnerabilities early, speed up releases, and ...

We're hosting a few of our customers, including Blackstone's security team, in Semgrep's private suite for Nets vs. Bulls at Barclays Center. We'd love for you to join us.

Set your status to OOO. Between trainings and the main conference, patch out the stress with massages, chill vibes, bites and drinks. This is our night to recognize the people who contribute to making ...

You can do everything right and still get compromised. Part four of the Cybersecurity Readiness Month series covers how to contain an attacker, respond fast, and recover cleanly once they’re in. For ...

AI tokens are getting cheaper, but enterprise AI bills keep climbing. The question worth asking is what those tokens are being used for. The cost of using large language models (LLMs) has dropped ...

Semgrep is now part of Cursor Origin - bringing automated security scanning directly to repositories hosted in Cursor. If your repositories live in Cursor, every pull request can now get a Semgrep ...