Semgrep Funding, Investors & Competitors

Semgrep has raised $193M across 4 funding rounds, most recently a $100M Series D in February 2025.

Last Semgrep funding round

$100M

Series D · Feb 2025

Cumulative funding Semgrep raised

$193M

across 4 funding rounds

Key investors in Semgrep

  • Sequoia Capital
  • Redpoint
  • Felicis
  • Lightspeed Venture Partners
  • Harpoon
  • Menlo Ventures
  • Bradley Horowitz
  • Bob Wood

Semgrep Overview

About Semgrep

Semgrep is a San Francisco-headquartered developer of open-source static application security testing tools. Its platform scans source code in languages such as Python, JavaScript, Java, Go, and C for vulnerabilities, secrets, and compliance issues. Semgrep integrates with CI/CD pipelines like GitHub Actions and Jenkins, serving enterprises including Dropbox, Snowflake, and GitLab. Launched in 2019, it processes millions of repositories daily across cloud and on-premises deployments.


Founded

2017

HQ

United StatesSan Francisco, CA

Status

Privately held

Customer focus

B2B

Revenue model

Subscription

Semgrep Funding History

Semgrep has raised a total of $193M across 4 funding rounds.

Semgrep's first fundraising round was a $13M Series A in October 2020. The most recent completed round was a $100M Series D in February 2025.

Semgrep funding rounds

Semgrep funding rounds
DateStageInvestorsRaisedDeal Summary
Feb 2025Series DMenlo Ventures (lead); Redpoint; Felicis; Sequoia Capital; Lightspeed Venture Partners; Harpoon$100MSemgrep is a San Francisco-based application security platform specializing in open-source static code analysis to help developers detect vulnerabilities, enforce code standards, and integrate security seamlessly into the development process without slowing velocity. The company offers products including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Secrets management, and the recently launched AI-powered Semgrep Assistant, which autonomously identifies, triages, fixes security issues, and creates secure guardrails. Founded in 2017, Semgrep positions itself at the intersection of open-source software and AI-driven security, targeting developers and security engineers to build cost-effective AppSec programs. On February 5, 2025, Semgrep announced a $100 million Series D funding round led by Menlo Ventures, with participation from existing investors Felicis Ventures, Harpoon Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, bringing total funding to $204 million. This follows the Series C round of $53 million led by Lightspeed in April 2023 and earlier rounds including Series B of $27 million in July 2021 led by Felicis. Menlo Ventures partner Matt Murphy joined the board, praising Semgrep's AI approach as the future of application security. Proceeds from the Series D will fund hiring AI and program analysis experts, expand the go-to-market team with veterans from HashiCorp, Elasticsearch, and Snyk, and broaden market reach beyond security professionals. Since Series C, Semgrep has advanced its platform with new capabilities and strategic hires like VP of Sales Garrett Souza and advisor Mark McLaughlin, former CEO of Palo Alto Networks. CEO Isaac Evans emphasized Semgrep's unique positioning in the AI-for-security era to secure code while maintaining development speed. The round marks one of the largest cybersecurity VC investments in early 2025, amid a market where funding has been stagnant following a 43% jump to $11.6 billion in 2024. Semgrep competes in the growing application security space, leveraging its open-source roots and AI innovations to differentiate from players like Snyk.
Apr 2023Series CLightspeed Venture Partners (lead); Redpoint; Bradley Horowitz; Felicis; Sequoia Capital$53MSemgrep is an application security platform that provides static application security testing (SAST), software composition analysis (SCA), and secrets detection capabilities. The company combines open source and SaaS offerings, with its open source tooling reaching approximately 2 million users by April 2023. The platform allows developers and security engineers to create guardrails that proactively secure application development while maintaining development velocity. Semgrep was founded in 2017 and had previously released its open source version at the end of 2020. In April 2023, Semgrep announced a $53 million Series C funding round led by Lightspeed Venture Partners with participation from previous investors Felicis Ventures, Redpoint Ventures, and Sequoia Capital. The company brought its total funding to $93 million at that time. The round was pursued opportunistically: CEO Isaac Evans stated the company had not been planning to fundraise until summer but received a preemptive offer from investors. The capital was designated for further development of AI capabilities and growth of the enterprise sales team, with plans to add approximately 50 employees by the end of 2023. At the time of the Series C round, Semgrep's revenue-producing products had grown 7.5x year-over-year, with commercial products experiencing 750% growth, though absolute revenue figures were not disclosed. The company had 90 employees at the time of the announcement and counted major customers including Snowflake and Dropbox.
Jul 2021Series BFelicis (lead); Redpoint; Bob Wood; Sequoia Capital$27MSemgrep, operating through r2c (later rebranded as Semgrep), develops a SaaS platform built around the open-source Semgrep tool, described as a code-aware grep for security-focused code analysis to detect vulnerabilities and issues in codebases. Semgrep evolved from a project originally built at Facebook, with r2c creating the canonical fork and a service to simplify adoption across multiple programming languages. The company targets broad language support and customizability to serve security teams in finding and preventing data leaks and intrusions throughout the software development lifecycle. In July 2021, r2c (Semgrep) closed a $27 million Series B funding round led by Felicis Ventures, with participation from prior investors Redpoint Ventures and Sequoia Capital. This pre-emptive deal followed a $13 million Series A in October 2020. The funds were intended to expand platform capabilities, enhance market reach, improve sales and marketing efforts, and support wide language coverage rather than niche focus like C programming. By the time of the Series B, Semgrep had gained traction with adoption by major companies including Salesforce, Dropbox, Stripe, Netflix, Figma, Snowflake, and Chef as a scanning tool and for writing custom rules. Security consultancies like Trail of Bits, Latacora, and NCC Group contributed rules, forming a growing community of researchers and developers. Integrations advanced, such as with GitLab SAST, where Semgrep became the default analyzer for JavaScript, Python, and TypeScript in GitLab 14. Semgrep continued raising capital post-2021, with a Series C of $53 million in April 2023 led by Lightspeed Venture Partners to develop AI capabilities and grow enterprise sales, and a Series D of $100 million in February 2025 led by Menlo Ventures, bringing total funding to around $193-204 million. These later rounds focused on AI-driven code security, hiring experts, commercializing products, and expanding beyond security audiences. The company attracted high-profile advisors like former Palo Alto Networks CEO Mark McLaughlin.
Oct 2020Series ARedpoint; Sequoia Capital; Harpoon$13MSemgrep raised $13 million in its Series A funding round in October 2020. Lead investors were not publicly disclosed. The round supported the initial development and launch of Semgrep's application security platform.

Who has invested in Semgrep?

8 investors have backed Semgrep across its funding rounds, including Sequoia Capital, Redpoint, Felicis, Lightspeed Venture Partners, Harpoon and Menlo Ventures.

Lead investors include Menlo Ventures, Lightspeed Venture Partners and Felicis.


Semgrep Investors

Investors in Semgrep by funding rounds participated
InvestorHQRoundsRoleFirst check
RedpointUnited StatesSan Francisco, CA4ParticipantOct 2020
Sequoia CapitalUnited StatesSan Francisco, CA4ParticipantOct 2020
FelicisUnited StatesSan Francisco, CA3LeadJul 2021
Lightspeed Venture PartnersUnited StatesSan Francisco, CA2LeadApr 2023
HarpoonUnited StatesSan Diego, CA2ParticipantOct 2020
Menlo VenturesUnited StatesSan Francisco, CA1LeadFeb 2025

This data is available for Pro users. Sign up to see all 8 Semgrep investors.

Start Free Trial

Benchmark 350K+ Funding Rounds and Disclosed VC Valuation Multiples

Sign up to see data on 350K+ funding rounds and disclosed revenue and EBITDA valuation multiples, from seed, through growth stage, to pre-IPO.

Start Free Trial

Semgrep Competitors

Semgrep competitors include listed companies like Cloudflare, Progress Software and Palo Alto Networks, and private ones like Snyk, Anthropic and OpenAI.

Public and private companies comparable to Semgrep
CompanyHQStatusRevenueEBITDAValuationRevenue Multiple
CloudflareUnited StatesUnited StatesPublicly listed$2.2B($25M)$119B44.3x
SnykUnited StatesBoston, MAPrivate$180M-$7.4B41.1x
Progress SoftwareUnited StatesUnited StatesPublicly listed$978M$302M$1.7B2.9x
AnthropicUnited StatesSan Francisco, CAPrivate$47B-$965B20.5x
OpenAIUnited StatesSan Francisco, CAPrivate$25B-$852B34.1x
Palo Alto NetworksUnited StatesUnited StatesPublicly listed$11B$1B$307B25.9x

Semgrep Public Comps

Semgrep is still privately-owned, but its public comps include Palo Alto Networks, CrowdStrike, IBM, Fortinet, Cloudflare, Datadog, Atlassian, Okta, Zscaler and MongoDB.

Last FYEV/RevenueEV/EBITDA
RevenueEBITDALast FYLTM2027ELast FYLTM2027E
Palo Alto Networks$11B$1B26.7x25.9x301.1x76.9x
CrowdStrike$4.8B($12M)51.4x44.5x(19816.2x)151.0x
IBM$68B$17B4.2x4.0x16.9x14.6x
Fortinet$6.8B$2.3B18.1x15.9x53.7x41.9x
Cloudflare$2.2B($25M)54.6x44.3x(4653.4x)185.1x
Datadog$3.4B($588K)23.6x19.4x(137813.0x)77.6x
Atlassian$6.6B$142M7.4x7.2x342.1x23.7x
Okta$2.9B$245M10.6x10.0x126.4x36.4x

This data is available for Pro users. Sign up to see all Semgrep competitors and their valuation data.

Start Free Trial

Common questions about Semgrep

When was Semgrep founded?Semgrep was founded in 2017.
Where is Semgrep headquartered?Semgrep is headquartered in San Francisco, CA, United States.
Is Semgrep publicly listed?No, Semgrep is a private, VC-backed company.
How much funding has Semgrep raised?Semgrep has raised $193M across 4 funding rounds.
What was Semgrep's last funding round?Semgrep's last funding round was a $100M Series D in February 2025, led by Menlo Ventures.
Who are Semgrep's investors?Semgrep's investors include Redpoint, Sequoia Capital, Felicis, Lightspeed Venture Partners, Harpoon, Menlo Ventures, Bob Wood and Bradley Horowitz.
Which companies are comparable to Semgrep?Companies comparable to Semgrep include Cloudflare, Snyk, Progress Software, Anthropic, OpenAI and Palo Alto Networks.

See companies similar to Semgrep

Start Your
Free Trial Today

Try Multiples for free for 3 days. Got questions or need a demo? Schedule a call with us below.

Start Trial