Try our new research platform with insights from 80,000+ expert users

GitLab vs Semgrep comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab
Ranking in Static Application Security Testing (SAST)
7th
Ranking in Software Composition Analysis (SCA)
5th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
86
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (3rd), DevSecOps (1st)
Semgrep
Ranking in Static Application Security Testing (SAST)
24th
Ranking in Software Composition Analysis (SCA)
11th
Average Rating
8.0
Reviews Sentiment
7.8
Number of Reviews
1
Ranking in other categories
Supply Chain Management Software (4th), Static Code Analysis (8th)
 

Mindshare comparison

As of October 2025, in the Static Application Security Testing (SAST) category, the mindshare of GitLab is 2.3%, down from 2.5% compared to the previous year. The mindshare of Semgrep is 3.0%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
GitLab2.3%
Semgrep3.0%
Other94.7%
Static Application Security Testing (SAST)
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
Henry Mwawai - PeerSpot reviewer
Automated code reviews and good scalability with custom rule adaptability
We use Semgrep to check custom user pipelines and test their claims for any vulnerabilities. We process the code by passing it through the testing process for any operability issues before sending feedback to the developers and providing the final product. This is part of the static testing…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The SaaS setup is impressive, and it has DAST solutioning."
"I have found the most valuable feature is security control. I also like the branching and cloning software."
"GitLab's best features are maintenance, branch integration, and development infrastructure."
"This product is always evolving, and they listen to the customers."
"GitLab is a solution for source code management, container registry, pipelines, testing, and deployment."
"CI/CD and GitLab scanning are the most valuable features."
"The scalability is good."
"It is user-friendly, easy to use, and easy to administer."
"The most valuable feature is the ability to write our custom rules."
 

Cons

"The documentation could be improved to help newcomers better understand things like creating new branches."
"I would like to see AI support in GitLab."
"Based on what I know so far, its integration with Kubernetes is not so good. We have to develop many things to make it work. We have to acquire third-party components to work with Kubernetes."
"I rate the support from GitLab a four out of five."
"The integration could be slightly better."
"It has fewer options, and its UI is not so user-friendly."
"I believe there's room for improvement in the advanced features, particularly in enhancing the pipeline functionalities."
"The solution could be faster."
"There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly."
 

Pricing and Cost Advice

"Regarding pricing, I would rate GitLab as moderately priced, maybe around a seven or eight out of ten. It could be more flexible for clients but generally offers good value."
"There are different licensing options available, including a free limited-user license."
"This is an open-source solution."
"We are currently using the open-source version."
"GitLab is an open-source solution."
"I'm not sure if they have some kind of discount. I've been negotiating with them on prices before, and I believe they weren't too happy to give discounts, but list prices are $19 per user, per month for Premium and $99 per user, per month for Ultimate. So, the difference between Premium and Ultimate is a bit bigger, and in most companies, you need to build some type of business case."
"The price is okay."
"The initial setup cost is excellent and you can add the premium features later."
Information not available
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
868,787 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
14%
Government
11%
Manufacturing Company
10%
Financial Services Firm
18%
Manufacturing Company
13%
Computer Software Company
11%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise9
Large Enterprise42
No data available
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
We are currently using general GitLab, not GitLab Premium.
What needs improvement with GitLab?
GitLab needs to improve the CI/CD functionality because it is not compatible with Jenkins and other tools, as it is not that efficient. Security-wise, we have security features enabled in GitLab fo...
What needs improvement with Semgrep?
There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly.
What is your primary use case for Semgrep?
We use Semgrep to check custom user pipelines and test their claims for any vulnerabilities. We process the code by passing it through the testing process for any operability issues before sending ...
 

Comparisons

 

Also Known As

Fuzzit
Semgrep Code, Semgrep Supply Chain, Semgrep AppSec Platform
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Policygenius, Tide, Lyft, Thinkific, FloQast, Vanta, and Fareportal
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: September 2025.
868,787 professionals have used our research since 2012.