Semgrep Pricing

freemiumopen sourcelast verified August 26, 2026official site ↗

Plan	Price	Notes
Free (Community)official source ↗	$0checked 2026-08-26	Free for organizations up to 10 contributors, open-source CLI, standard rule registry, basic CI/CD integrations
Teamofficial source ↗	USD 30/monthchecked 2026-08-26	Semgrep Assistant AI triage, Secrets scanning, SCA dependency checks, PR comments, priority support
Enterpriseofficial source ↗	Customchecked 2026-08-26	On-premise SCM support, custom CI/CD, SAML SSO, audit logs, unlimited contributors, dedicated solutions engineer

structured from cited official pricing sources: “Semgrep provides a free Community tier for up to 10 contributors featuring the open-source static analysis engine and standard rules. The Team tier starts at $30/month per contributing developer, adding Semgrep Assistant AI triage and Secrets scanning. Enterprise pricing is customized for large teams requiring SSO, on-prem SCM, and audit trails.”

Self-hosting cost

Semgrep is open source. Self-hosting does not add a software license fee, but you still pay for infrastructure, operations, and any external model or API usage. Any hosted, managed, or API plans remain separately priced.

Free & cheaper Code Review AI

same category, free plan or open-source license

OpenLITopen source100% free and open source under the Apache-2.0 license ($0 self-hosted on Docker and Kubernetes). Features OpenTelemetry-native LLM tracing, GPU hardware metrics (NVIDIA/AMD/Intel), Prompt Hub, and security guardrails. Managed OpenLIT Cloud edition is available for hosted enterprise deployments.Ciliumopen sourceFree and 100% open source under the Apache-2.0 license (with dual GPL-2.0/BSD-2-Clause BPF datapath templates) as a CNCF Graduated project. Cilium has no software licensing fees for self-hosted or cloud Kubernetes deployments (including GKE Dataplane V2 and Azure CNI Powered by Cilium); organizations pay only for their compute infrastructure. For mission-critical enterprise environments, Isovalent Enterprise for Cilium (by Cisco) provides quote-based annual subscriptions (per-node/environment) with 24/7 SLA support, hardened LTS builds, Customer Testing Environments (CuTEs), enterprise BGP/EVPN, and advanced multi-cluster security and observability retention.MCP-Scanopen source100% free and open-source Model Context Protocol (MCP) security auditing and vulnerability scanner developed by Invariant Labs (Apache-2.0 License). Analyzes MCP client configurations, tool schemas, and server definitions to detect prompt injection vectors, malicious tool poisoning, cross-server shadowing, and unintended permission escalation at zero software cost.PangolinFree Community Edition under AGPL-3.0; Enterprise Edition (FCL) is free for homelabbers/individuals and orgs with <$100K gross annual revenue, paid license required for >=$100K revenue.

Semgrep overview →alternatives →review: 87/100 →

FAQ

How much does Semgrep cost?

Semgrep provides a free Community tier for up to 10 contributors featuring the open-source static analysis engine and standard rules. The Team tier starts at $30/month per contributing developer, adding Semgrep Assistant AI triage and Secrets scanning. Enterprise pricing is customized for large teams requiring SSO, on-prem SCM, and audit trails. Paid pricing starts at $30/month per contributing developer.

Does Semgrep have a free plan?

Yes — Semgrep has a free plan alongside its paid tiers.

Can you self-host Semgrep for free?

What are free or cheaper Semgrep alternatives?

OpenLIT, Cilium, MCP-Scan are in the same category with a free plan or open-source license.

pricing is editorial catalog data (last verified August 26, 2026) — vendors change plans; confirm on the official site before you buy. Reuse this data under CC-BY 4.0 via /data.