semgrep

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

A MCP server for using Semgrep to scan code for security vulnerabilities.

Prevent merging of malicious code in pull requests

Focused malicious code detection ruleset, with a high protection-to-noise ratio

Generic SAST Library

Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂

Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

Semgrep rules specific to Frappe Framework

Documentation of Semgrep: a fast, open-source, static analysis tool.

Semgrep-based Policy Controller for Kubernetes

🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.

Automatically scan new pypi packages for potentially malicious code

A collection of permissively licensed Semgrep rules.

My custom semgrep rules

AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.

一个专业的 java代码审计 Skill

A Python framework for combining static analysis with LLM-based bug verification

Semgrep rules to identify GWT attack surface