Semgrep OSS — #2 Alternative to Snyk
Fast, syntax-aware static code analysis engine supporting 30+ languages
Semgrep lets security engineers write custom AST-aware guardrails that look just like target source code, catching framework-specific injection, auth bypasses, and insecure defaults in seconds on every PR.
License: LGPL-2.1 · Pricing: Open Core · Compare all Snyk alternatives · Official Website