Getting developers aligned on a SAST product and having them actually use it is the hardest part of the job for an AppSec Engineer. We were able to achieve this with Semgrep Code.

It's easy enough to write rules for Semgrep that security and other engineering teams use it to solve complex problems. This flexibility is a huge win, and the library of managed rules means we only have to write our own when we have custom problems.

Semgrep makes it so that developers can focus on the issues they need to focus on rather than the ones they don’t