Semgrep, Inc.

Based in the US, Semgrep, Inc. , formerly known as R2C, specializes in security solutions that empower organizations to identify and remediate vulnerabilities in their software development processes. Semgrep, Inc. is a San Francisco-based company founded in 2017 by Drew Dennison, Isaac Evans, and Luke O'Malley.

The company focuses on providing security solutions for software development, evolving from its previous identity as R2C. Isaac Evans currently serves as the CEO. Semgrep has successfully raised USD 100. 00 mn in Series D funding on February 5, 2025, led by Menlo Ventures along with participation from other investors including Felicis Ventures, Harpoon Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital.

This recent funding round brings the total amount raised by the company to USD 100. 00 mn and values Semgrep at USD 722. 02 mn. Semgrep offers a suite of security products designed to help organizations identify and remediate vulnerabilities in their software development processes.

The core offerings include Semgrep Code, focusing on static application security testing (SAST) to find issues in code; Semgrep Supply Chain, addressing vulnerabilities in dependencies; and Semgrep Secrets, aimed at detecting hardcoded secrets through semantic analysis. These products utilize advanced AI capabilities to automate the identification of security vulnerabilities, providing actionable insights directly within developer workflows such as pull requests and IDEs. Semgrep serves a diverse clientele, including engineering teams and AppSec professionals in various industries, with its solutions being utilized across North America, Europe, and parts of Asia, catering to organizations of all sizes from startups to large enterprises. Semgrep generates revenue primarily through a subscription model for its suite of security products.

Clients typically engage with Semgrep on a B2B basis, entering into annual contracts that provide access to its various services, including customized solutions tailored to specific organizational needs. The company’s flagship products, such as Semgrep Code and Semgrep Supply Chain, are available under different pricing tiers, offering options suited to varying scales of operation and deployment preferences. This transactional structure enables organizations to incorporate security testing and management into their existing development workflows, facilitating a seamless integration of security practices within their software development lifecycle. The revenue is driven by the critical demand for enhanced security measures in software development, especially in an environment increasingly focused on mitigating software supply chain risks.

In February 2025, Semgrep raised USD 100. 00 mn in Series D funding to enhance its artificial intelligence solutions and products. The company plans to develop additional offerings aimed at improving software security, although specific product release dates have not been disclosed. Semgrep is also targeting expansion into European and Asian markets to broaden its customer base.

The recent funding will be instrumental in supporting these initiatives, allowing Semgrep to strengthen its market presence and further innovate its product line.