- Companies
- Semgrep
Semgrep Funding, Investors & Competitors
Semgrep has raised $193M across 4 funding rounds, most recently a $100M Series D in February 2025.
Last Semgrep funding round
$100M
Series D · Feb 2025
Cumulative funding Semgrep raised
$193M
across 4 funding rounds
Key investors in Semgrep
Sequoia Capital
Redpoint
Felicis
Lightspeed Venture Partners
Harpoon
Menlo Ventures
Bradley Horowitz
Bob Wood
About Semgrep
Semgrep is a San Francisco-headquartered developer of open-source static application security testing tools. Its platform scans source code in languages such as Python, JavaScript, Java, Go, and C for vulnerabilities, secrets, and compliance issues. Semgrep integrates with CI/CD pipelines like GitHub Actions and Jenkins, serving enterprises including Dropbox, Snowflake, and GitLab. Launched in 2019, it processes millions of repositories daily across cloud and on-premises deployments.
Founded
2017
HQ
Website
Status
Privately held
Customer focus
B2B
Revenue model
Subscription
Semgrep Funding History
Semgrep has raised a total of $193M across 4 funding rounds.
Semgrep's first fundraising round was a $13M Series A in October 2020. The most recent completed round was a $100M Series D in February 2025.
Semgrep funding rounds
| Date | Stage | Investors | Raised | Deal Summary |
|---|---|---|---|---|
| Feb 2025 | Series D | Menlo Ventures (lead); Redpoint; Felicis; Sequoia Capital; Lightspeed Venture Partners; Harpoon | $100M | Semgrep is a San Francisco-based application security platform specializing in open-source static code analysis to help developers detect vulnerabilities, enforce code standards, and integrate security seamlessly into the development process without slowing velocity. The company offers products including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Secrets management, and the recently launched AI-powered Semgrep Assistant, which autonomously identifies, triages, fixes security issues, and creates secure guardrails. Founded in 2017, Semgrep positions itself at the intersection of open-source software and AI-driven security, targeting developers and security engineers to build cost-effective AppSec programs. On February 5, 2025, Semgrep announced a $100 million Series D funding round led by Menlo Ventures, with participation from existing investors Felicis Ventures, Harpoon Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, bringing total funding to $204 million. This follows the Series C round of $53 million led by Lightspeed in April 2023 and earlier rounds including Series B of $27 million in July 2021 led by Felicis. Menlo Ventures partner Matt Murphy joined the board, praising Semgrep's AI approach as the future of application security. Proceeds from the Series D will fund hiring AI and program analysis experts, expand the go-to-market team with veterans from HashiCorp, Elasticsearch, and Snyk, and broaden market reach beyond security professionals. Since Series C, Semgrep has advanced its platform with new capabilities and strategic hires like VP of Sales Garrett Souza and advisor Mark McLaughlin, former CEO of Palo Alto Networks. CEO Isaac Evans emphasized Semgrep's unique positioning in the AI-for-security era to secure code while maintaining development speed. The round marks one of the largest cybersecurity VC investments in early 2025, amid a market where funding has been stagnant following a 43% jump to $11.6 billion in 2024. Semgrep competes in the growing application security space, leveraging its open-source roots and AI innovations to differentiate from players like Snyk. |
| Apr 2023 | Series C | Lightspeed Venture Partners (lead); Redpoint; Bradley Horowitz; Felicis; Sequoia Capital | $53M | Semgrep is an application security platform that provides static application security testing (SAST), software composition analysis (SCA), and secrets detection capabilities. The company combines open source and SaaS offerings, with its open source tooling reaching approximately 2 million users by April 2023. The platform allows developers and security engineers to create guardrails that proactively secure application development while maintaining development velocity. Semgrep was founded in 2017 and had previously released its open source version at the end of 2020. In April 2023, Semgrep announced a $53 million Series C funding round led by Lightspeed Venture Partners with participation from previous investors Felicis Ventures, Redpoint Ventures, and Sequoia Capital. The company brought its total funding to $93 million at that time. The round was pursued opportunistically: CEO Isaac Evans stated the company had not been planning to fundraise until summer but received a preemptive offer from investors. The capital was designated for further development of AI capabilities and growth of the enterprise sales team, with plans to add approximately 50 employees by the end of 2023. At the time of the Series C round, Semgrep's revenue-producing products had grown 7.5x year-over-year, with commercial products experiencing 750% growth, though absolute revenue figures were not disclosed. The company had 90 employees at the time of the announcement and counted major customers including Snowflake and Dropbox. |
| Jul 2021 | Series B | Felicis (lead); Redpoint; Bob Wood; Sequoia Capital | $27M | Semgrep, operating through r2c (later rebranded as Semgrep), develops a SaaS platform built around the open-source Semgrep tool, described as a code-aware grep for security-focused code analysis to detect vulnerabilities and issues in codebases. Semgrep evolved from a project originally built at Facebook, with r2c creating the canonical fork and a service to simplify adoption across multiple programming languages. The company targets broad language support and customizability to serve security teams in finding and preventing data leaks and intrusions throughout the software development lifecycle. In July 2021, r2c (Semgrep) closed a $27 million Series B funding round led by Felicis Ventures, with participation from prior investors Redpoint Ventures and Sequoia Capital. This pre-emptive deal followed a $13 million Series A in October 2020. The funds were intended to expand platform capabilities, enhance market reach, improve sales and marketing efforts, and support wide language coverage rather than niche focus like C programming. By the time of the Series B, Semgrep had gained traction with adoption by major companies including Salesforce, Dropbox, Stripe, Netflix, Figma, Snowflake, and Chef as a scanning tool and for writing custom rules. Security consultancies like Trail of Bits, Latacora, and NCC Group contributed rules, forming a growing community of researchers and developers. Integrations advanced, such as with GitLab SAST, where Semgrep became the default analyzer for JavaScript, Python, and TypeScript in GitLab 14. Semgrep continued raising capital post-2021, with a Series C of $53 million in April 2023 led by Lightspeed Venture Partners to develop AI capabilities and grow enterprise sales, and a Series D of $100 million in February 2025 led by Menlo Ventures, bringing total funding to around $193-204 million. These later rounds focused on AI-driven code security, hiring experts, commercializing products, and expanding beyond security audiences. The company attracted high-profile advisors like former Palo Alto Networks CEO Mark McLaughlin. |
| Oct 2020 | Series A | Redpoint; Sequoia Capital; Harpoon | $13M | Semgrep raised $13 million in its Series A funding round in October 2020. Lead investors were not publicly disclosed. The round supported the initial development and launch of Semgrep's application security platform. |
Who has invested in Semgrep?
8 investors have backed Semgrep across its funding rounds, including Sequoia Capital, Redpoint, Felicis, Lightspeed Venture Partners, Harpoon and Menlo Ventures.
Lead investors include Menlo Ventures, Lightspeed Venture Partners and Felicis.
Semgrep Investors
| Investor | HQ | Rounds | Role | First check |
|---|---|---|---|---|
| 4 | Participant | Oct 2020 | ||
| 4 | Participant | Oct 2020 | ||
| 3 | Lead | Jul 2021 | ||
| 2 | Lead | Apr 2023 | ||
| 2 | Participant | Oct 2020 | ||
| 1 | Lead | Feb 2025 | ||
This data is available for Pro users. Sign up to see all 8 Semgrep investors. Start Free Trial | ||||
Benchmark 350K+ Funding Rounds and Disclosed VC Valuation Multiples
Sign up to see data on 350K+ funding rounds and disclosed revenue and EBITDA valuation multiples, from seed, through growth stage, to pre-IPO.
Start Free TrialSemgrep Competitors
Semgrep competitors include listed companies like Cloudflare, Progress Software and Palo Alto Networks, and private ones like Snyk, Anthropic and OpenAI.
| Company | HQ | Status | Revenue | EBITDA | Valuation | Revenue Multiple |
|---|---|---|---|---|---|---|
| Publicly listed | $2.2B | ($25M) | $119B | 44.3x | ||
| Private | $180M | - | $7.4B | 41.1x | ||
| Publicly listed | $978M | $302M | $1.7B | 2.9x | ||
| Private | $47B | - | $965B | 20.5x | ||
| Private | $25B | - | $852B | 34.1x | ||
| Publicly listed | $11B | $1B | $307B | 25.9x |
Semgrep Public Comps
Semgrep is still privately-owned, but its public comps include Palo Alto Networks, CrowdStrike, IBM, Fortinet, Cloudflare, Datadog, Atlassian, Okta, Zscaler and MongoDB.
| Last FY | EV/Revenue | EV/EBITDA | ||||||
|---|---|---|---|---|---|---|---|---|
| Revenue | EBITDA | Last FY | LTM | 2027E | Last FY | LTM | 2027E | |
| $11B | $1B | 26.7x | 25.9x | 301.1x | 76.9x | |||
| $4.8B | ($12M) | 51.4x | 44.5x | (19816.2x) | 151.0x | |||
| $68B | $17B | 4.2x | 4.0x | 16.9x | 14.6x | |||
| $6.8B | $2.3B | 18.1x | 15.9x | 53.7x | 41.9x | |||
| $2.2B | ($25M) | 54.6x | 44.3x | (4653.4x) | 185.1x | |||
| $3.4B | ($588K) | 23.6x | 19.4x | (137813.0x) | 77.6x | |||
| $6.6B | $142M | 7.4x | 7.2x | 342.1x | 23.7x | |||
| $2.9B | $245M | 10.6x | 10.0x | 126.4x | 36.4x | |||
This data is available for Pro users. Sign up to see all Semgrep competitors and their valuation data. Start Free Trial | ||||||||
Common questions about Semgrep
| When was Semgrep founded? | Semgrep was founded in 2017. |
| Where is Semgrep headquartered? | Semgrep is headquartered in San Francisco, CA, United States. |
| Is Semgrep publicly listed? | No, Semgrep is a private, VC-backed company. |
| How much funding has Semgrep raised? | Semgrep has raised $193M across 4 funding rounds. |
| What was Semgrep's last funding round? | Semgrep's last funding round was a $100M Series D in February 2025, led by Menlo Ventures. |
| Who are Semgrep's investors? | Semgrep's investors include Redpoint, Sequoia Capital, Felicis, Lightspeed Venture Partners, Harpoon, Menlo Ventures, Bob Wood and Bradley Horowitz. |
| Which companies are comparable to Semgrep? | Companies comparable to Semgrep include Cloudflare, Snyk, Progress Software, Anthropic, OpenAI and Palo Alto Networks. |
See companies similar to Semgrep
Start Your
Free Trial Today
Try Multiples for free for 3 days. Got questions or need a demo? Schedule a call with us below.




