Forrester has named Semgrep a Strong Performer in the first edition of The Forrester Wave™: Agentic Development Security ...

Semgrep Guardian goes self-serve with Codex support, plus incident-first advisories and transitive Autofix. See everything ...

One Brotli decoder bug. A lot of copies. TL;DR - CVE-2026-111497 is an out-of-bounds write in the Brotli decompressor in google/brotli, fixed upstream in 1.2.1. It is not a separate Node, PHP, or npm ...

Semgrep is sponsoring our friends at OWASP Netherlands Chapter's next meetup – taking place on 29th October at KvK HQ, Utrecht. We're looking forward to catching up with the Dutch AppSec community!

You can do everything right and still get compromised. Part four of the Cybersecurity Readiness Month series covers how to contain an attacker, respond fast, and recover cleanly once they’re in. For ...

AI tokens are getting cheaper, but enterprise AI bills keep climbing. The question worth asking is what those tokens are being used for. The cost of using large language models (LLMs) has dropped ...

Semgrep is now part of Cursor Origin - bringing automated security scanning directly to repositories hosted in Cursor. If ...

Reviewing every change by hand is ending. For many teams, it already has. Code is mostly written by agents. This shifts the bottleneck downstream to verification. Code changes can be classified into ...

Semgrep is proud to sponsor the NexGen Agentic AI Infrastructure, Observability & Security Summit in New York City. Our team will be on site, so stop by our table to pick up some swag, meet the team, ...

In the first part of this series, I argued that after more than two decades, we should retire Cybersecurity Awareness Month and replace it with Cybersecurity Readiness Month. Awareness was a ...