Semgrep Python Packages

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

libsast

Generic SAST Library

semgrep-mcp

A MCP server for using Semgrep to scan code for security vulnerabilities.

devsecops-radar

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

redteam-mcp

Active red-teaming for MCP servers. Source analysis + live exploitation + auto-fix. Claude Code plugin.

tg-engine

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

constraints-registry

MCP server giving AI coding agents (Claude Code, Cursor, Codex) a queryable source of engineering constraints — policy-as-code guardrails for AI-generated code, backed by OPA, Conftest, Checkov & Semgrep.

crossfire-rules

Regex rule overlap analyzer for DLP, secret scanning, SAST, and IDS tools

securescan

Diff-aware security scanning with multi-tool orchestration, deterministic SARIF, and PR-comment rendering.

simplesecurity

Combine multiple popular python security tools and generate reports or output into different formats

velonus

AI-native security copilot for Python developers

semgrep-rules-manager

Manager of third-party Semgrep rules

semhound

Scan every repository across your GitHub organisations using Semgrep rules, with optional AI triage

vulnhawk

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

actspect

ActSpect placeholder package

authdrift

Find OAuth handlers that will break when users rename their identifier.

verix

Local-first AppSec agent for Claude Code and the terminal

semanticgrep

This package is parked by the Semgrep team. See https://github.com/returntocorp/semgrep for more information.

sgrep

A python package of sgrep tool

samgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

semgerp

This package is parked by the Semgrep team. See https://github.com/returntocorp/semgrep for more information.

simgrep

This package is parked by the Semgrep team. See https://github.com/returntocorp/semgrep for more information.

semdep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

smegrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.