Semgrep Assistant (now Semgrep Multimodal)
https://semgrep.dev/products/semgrep-multimodal/
Semgrep's AI layer (Assistant) on top of its OSS rules-based SAST engine — triages findings, suppresses false positives, drafts fixes via PR. Semgrep parent: $59.5M Series C Nov-2022 ($530M val); >100M scans/year reported.
Renamed · Verified 2026-10-28 · fresh as of 2026-10-28 · 20 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction
At a glance
- Tier
- T2
- Created
- 2024 (Assistant launch) vendor fix
- Latest release
- not applicable — wrong section fix
- License
- not applicable — not OSS fix
- GitHub
- not applicable — no GitHub repo fix
- Pricing
- Free tier (up to 10 contributors, 60 AI credits); Teams from $30/month per contributor (20 AI credits per developer/month); Enterprise quote vendor fix
- Funding
- Semgrep parent: $100M Series D led by Menlo Ventures vendor fix
- Freshness
- 2026-10-28 fix
- Layer
- agent-infra repo fix
- Licensing
- commercial vendor fix
- Protocols
- mcp-server vendor fix
When to use
Optimised for: AI-triaged Semgrep SAST findings
Anti-fit: not applicable — wrong section
Pros & cons
Pros
Built on OSS rules-engine with strong community; AI overlay focuses on triage where it adds value; PR-ready fixes.
Cons
AI Assistant is a paid tier on top of free OSS; less broad than Snyk; primarily code-focused (no SCA depth).
Claims & capabilities
Assistant launched 2024; >70% reduction in noise per Semgrep data; backed by Semgrep OSS rules library (10k+ rules)
Technical surface
- API surface
- not applicable — wrong section
- Backend storage
- not applicable — wrong section
- Deployment
- not applicable — wrong section
- Embedding model
- not applicable — not a memory product
- Multi-tenancy
- not applicable — wrong section
- MCP
- yes — Semgrep MCP server now ships in the main semgrep binary (standalone semgrep/mcp repo deprecated)
- A2A
- not applicable — wrong section
- OpenTelemetry
- not applicable — wrong section
Alternatives to Semgrep Assistant (now Semgrep Multimodal) → live options ranked by shared design, licence, hosting and MCP support
Similar systems
Other use-case-specific agent harnesses in the catalog, ranked by inbound references.
- Calypso AI (now F5 AI Guardrails) T2
Dublin / NYC founded 2018; GenAI security and content scanning. $23M Series A-1 Aug-2024 (Paladin Capital + Lockheed Martin Ventures). Pivoted from defence ML to enterprise GenAI guardrails 2023-24.
- Salesforce Agentforce T1
Cross-listing: Salesforce Agentforce already exists under Vertical / Customer-support / voice memory; this row is the Agent-harness framing — Agentforce as the consumer-facing agent IDE / builder on Data Cloud. Agentforce launched Sep-2024; Agentforce 2.0 announced Dec-2024.
- Lasso Security T2
Tel-Aviv-founded LLM security platform — adversarial testing, prompt-injection defence, data-leakage prevention. $6M seed Nov-2023 (Entrée Capital + Samsung Next).
- Pillar Security T2
Tel-Aviv-founded (Dor Sarig + Ziv Karliner, both ex-IDF cyber); end-to-end LLM security platform — discovery, red-teaming, runtime guardrails. $9M seed Apr-2024 (Shield Capital + Greenfield).
- Promptfoo T2
OSS (MIT) prompt-engineering eval and red-team CLI; supports OWASP LLM Top-10 vulnerability tests, jailbreak generation, and CI/CD pipeline integration. $5M seed Mar-2024 (Andreessen Horowitz). Founders ex-Discord + ex-Smile Identity.
- Protect AI T2
Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI security. Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); its capabilities now ship in Prisma AIRS. Products: Recon (red-team), ModelScan (model artifact scanner), Sightline (vulnerability DB).
Sources (19 cited facts, 0 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is AI-assisted triage + auto-remediation for Semgrep findings vendor
- What it does & what's distinct Semgrep's AI layer (Assistant) on top of its OSS rules-based SAST engine — triages findi… vendor
- Claims / benefits Assistant launched 2024; >70% reduction in noise per Semgrep data; backed by Semgrep OSS… vendor
- Created 2024 (Assistant launch) vendor
- Funding Semgrep parent: $100M Series D led by Menlo Ventures vendor
- Customers / scale Snowflake, Figma, Vercel + thousands of OSS users vendor
- Pricing Free tier (up to 10 contributors, 60 AI credits); Teams from $30/month per contributor (… vendor
- HQ San Francisco vendor
- Founders / pedigree Isaac Evans (CEO) + team; Semgrep (r2c) founded 2018 vendor
- MCP support yes — Semgrep MCP server now ships in the main semgrep binary (standalone semgrep/mcp re… repo
- Optimised for AI-triaged Semgrep SAST findings vendor
- Pros Built on OSS rules-engine with strong community; AI overlay focuses on triage where it a… vendor
- Cons AI Assistant is a paid tier on top of free OSS; less broad than Snyk; primarily code-foc… vendor
- Project & sources semgrep.dev/products/assistant vendor
- architecture-deployment-locus cloud vendor
- licensing-bucket commercial vendor
- positioning-platform-vs-product product vendor
- taxonomy-three-layer-rollup agent-infra repo
- protocol-support mcp-server vendor
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-28
- Name “Semgrep Assistant” → “Semgrep Assistant (now Semgrep Multimodal)”
- Homepage “https://semgrep.dev/products/assistant” → “https://semgrep.dev/products/semgrep-multimodal/”
- Pricing “not applicable — wrong section” → “Free tier (up to 10 contributors, 60 AI credits); Teams from $30/month per contributor (20 AI credits per developer/month); Enterprise quote” source
- Funding / ownership “Semgrep parent: $59.5M Series C Nov-2022 (Felicis; $530M val)” → “Semgrep parent: $100M Series D led by Menlo Ventures” source
- MCP support “not applicable — wrong section” → “yes — Semgrep MCP server now ships in the main semgrep binary (standalone semgrep/mcp repo deprecated)” source