Semgrep

Semgrep is a fast, open-source static analysis tool that uses pattern-based rules to detect bugs, insecure code, and anti-patterns across many languages. It provides an expressive rule language that allows teams to write targeted checks for both security and quality issues. Semgrep integrates well into CI pipelines and developer workflows to provide immediate feedback and prevent regressions. The tool supports a hosted SaaS offering with rule management and team collaboration features. Its balance of speed and customizability makes it popular for both security teams and developers.