Shoulda, Woulda...Coulda
In the world of SAST it’s very easy to spot two types of findings: - True positives: A confirmed vulnerability - False positives: Something which is not a vulnerability This is due to the SAST engine reporting findings to the user, and then manual intervention takes place, where the user reviews the findings and determines if they are either a false positive or true positive.
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep
