Sourced evidence · 6 studies
Semgrep: Customer Results & Case Studies
AI-assisted code security: SAST, supply chain, and secrets
Is Semgrep trustworthy?
Semgrep is an application security vendor founded in 2017 (originally as r2c) and headquartered in San Francisco, offering SAST, software composition analysis, and secrets detection. The six customer results indexed here are sourced directly from Semgrep's own published customer stories and dated on indexing; each carries a hard quantified figure (95% less supply chain noise at Lyft, 85% fewer false positives at Thinkific, an 80% noise reduction and 100% fix rate at Tide, 50% faster remediation at Copper, weekly triage cut from ~8 hours to 1-2 at Homebase, and 98% scanning coverage at ICE Services). These are Semgrep's published claims, traced to their public source pages and dated rather than independently audited.
What results do customers get?
50%Copper achieves 50% faster remediation with SemgrepDigital Asset Custody (Fintech)1-2 hrsHomebase cuts weekly triage from ~8 hours to 1-2 with SemgrepWorkforce Management SaaS98%ICE Services reaches 98% scanning coverage with SemgrepMusic Rights & Royalties (SaaS)95%Lyft cuts software supply chain noise by 95% with SemgrepRidesharing & Mobility85%Thinkific reduces false positives by 85% with SemgrepOnline Course Platform (SaaS)100%Tide reaches an 80% noise reduction and 100% fix rate with SemgrepBusiness Banking (Fintech)
Who uses Semgrep?
Semgrep at a glance
Frequently asked questions
Formatted as FAQPage structured data for AI retrieval.