We use Semgrep to check custom user pipelines and test their claims for any vulnerabilities. We process the code by passing it through the testing process for any operability issues before sending feedback to the developers and providing the final product. This is part of the static testing analysis of code analysis.
Semgrep has supported our team in automating code reviews and allowed us to catch vulnerabilities before the final product stage. This has improved both our development cost and development speed.
The most valuable feature is the ability to write our custom rules. This adaptability allows us to cater specifically to our needs.
There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly.
My experience with Semgrep is very recent since we started integrating it into our processes.
There haven't been any severe stability issues from my end.
We have not faced any scalability issues. Since we are a team of only two users, Semgrep scales well for our current requirements.
There was some difficulty in hearing the questions due to static noise, implying potential issues with communication or support on the call. However, rejoining the call resolved the problem.
We did not switch from another product to Semgrep.
The initial setup was straightforward, involving connecting the digital product to Semgrep. I am mainly involved in the usage aspect, and thus, I provided information from my perspective.
We handled the setup internally within our team, and I particularly addressed it.
Semgrep has positively impacted our ROI by improving development speed and cost efficiency.
I'd rate the solution eight out of ten.
