Semgrep

semgrep.dev

1 tracked vendor, Privy, names Semgrep as a subprocessor. We have not found a subprocessor list published by Semgrep. We monitor 5 of its documents, which we last checked on Nov 12, 2026.

Subprocessors

None extracted.

Web TechnologiesCSV of Semgrep's web technologies · Atom feed of Semgrep's web technologies

Semgrep's homepage made 216 requests to 35 domains, 20 services controlled by another company, and 2 domains not identified.

Advertising (7): AdRoll, Reddit, Inc., Google Cloud, X Corp., OpenAI, Microsoft, MetadataAnalytics (7): Meta, Crazy Egg, Keyplay, Inc., LinkedIn, ZoomInfo, Reactful, WingifyMarketing automation (3): GetVector, Inc., Adobe, DreamdataCookie compliance (1): OneTrustCDN (1): jsDelivrUnclassified (1): no technology detected from them: Semgrep

20 third parties by category: Advertising 7Analytics 7Marketing automation 3Cookie compliance 1CDN 1Unclassified 1

Third parties 20 · 130 requests
AdRoll AdRoll 12% of the page's requests 25
Reddit, Inc. Reddit Ads 8% of the page's requests 18
Google Cloud DoubleClick Floodlight Google Analytics Google Tag Manager 6% of the page's requests 14
GetVector, Inc. Vector 6% of the page's requests 13
OneTrust OneTrust 6% of the page's requests 13
Semgrep semgrep.com 3% of the page's requests 6
Meta Facebook Pixel 2.9.433 2% of the page's requests 5
X Corp. Twitter Ads 2% of the page's requests 5
Crazy Egg Crazy Egg 2% of the page's requests 4
Keyplay, Inc. Keyplay 2% of the page's requests 4
OpenAI ChatGPT Ads Measurement Pixel 2% of the page's requests 4
Adobe Marketo 1% of the page's requests 3
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
Microsoft Microsoft Advertising 1% of the page's requests 3
ZoomInfo Zoominfo 1% of the page's requests 3
Dreamdata Dreamdata <1% of the page's requests 2
jsDelivr Bootstrap 5.3.3 jsDelivr <1% of the page's requests 2
Metadata Metadata.io <1% of the page's requests 1
Reactful Reactful <1% of the page's requests 1
Wingify VWO <1% of the page's requests 1
Unknown 2 · 4 requests

cr-relay.comusbrowserspeed.com

First party 1 · 82 requests
Semgrep AdRoll CMP System Amazon CloudFront Amazon Web Services FullStory HSTS Netlify Open Graph Priority Hints core-js 3.32.2 38% of the page's requests 82

12 tracked companies loaded by the homepage are not in Semgrep's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (1)CSV of the companies listing Semgrep · Atom feed of the companies listing Semgrep

1 company

ComplianceCSV of Semgrep's compliance · Atom feed of Semgrep's compliance

Certified
Says it complies with

Certifications as Semgrep's trust center lists them; reports are usually shared on request (evidence)

Service statusCSV of Semgrep's status page incidents · Atom feed of Semgrep's status page incidents

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: 1 incident (1 critical)Aug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: 1 incident (1 no impact stated)Sep 2: no incident reportedSep 3: 1 incident (1 major)Sep 4: 1 incident (1 major)Sep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: 1 incident (1 no impact stated)Sep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: 1 incident (1 minor)Sep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: 1 incident (1 major)Sep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: 1 incident (1 no impact stated)Oct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: 1 incident (1 major)Oct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: 1 incident (1 minor)Oct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: 1 incident (1 minor)Oct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: 1 incident (1 minor)Oct 28: 1 incident (1 minor)Oct 29: no incident reportedOct 30: 1 incident (1 minor)Oct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: 1 incident (1 no impact stated)Nov 4: no incident reportedNov 5: no incident reportedNov 6: 1 incident (1 minor)Nov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: 1 incident (1 minor)Nov 12: no incident reported

90 days agotoday

  • 18 incidents in 90 days
  • 5 major or critical
  • 1 h 17 min typical time to resolve
  • 2 h 40 min longest major
BeganIncidentImpactLasted
Wiz integration unavailable until January 14no impact stated21 days
Dashboard reporting data is laggedminor6 h 13 min
Possibly Delayed Scansminor1 h 7 min
Workflows Performance Degradedno impact stated1 h 30 min
Delayed Scansminor16 min
Scans are degraded or delayedminor2 h 23 min
Delay in findings being updatedminor43 min
Elevated 400 Bad Request errors when completing scans with Semgrep 1.181.0minor2 h 48 min

Incidents per month

0 5 10 Dec 2025: 4 incidents (1 major, 3 minor) · typical time to resolve 36 min Jan 2026: 5 incidents (2 major, 3 minor) · typical time to resolve 6 h 25 min Feb 2026: 4 incidents (4 minor) · typical time to resolve 1 h 16 min Mar 2026: 6 incidents (1 critical, 2 major, 3 minor) · typical time to resolve 4 h 14 min Apr 2026: 9 incidents (1 critical, 2 major, 4 minor, 2 no impact stated) · typical time to resolve 1 h 35 min May 2026: 4 incidents (2 major, 2 minor) · typical time to resolve 2 h 39 min Jun 2026: 3 incidents (1 major, 1 minor, 1 no impact stated) · typical time to resolve 1 h 48 min Jul 2026: 4 incidents (1 major, 2 minor, 1 no impact stated) · typical time to resolve 2 h 51 min Aug 2026: 3 incidents (1 critical, 1 major, 1 no impact stated) · typical time to resolve 2 h 47 min Sep 2026: 7 incidents (3 major, 1 minor, 3 no impact stated) · typical time to resolve 1 h 10 min Oct 2026: 6 incidents (1 major, 5 minor) · typical time to resolve 1 h 17 min Nov 2026: 3 incidents (2 minor, 1 no impact stated) · typical time to resolve 1 h 30 min Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidentsBar
Dashboard5
Managed Scans5
Scans and CI/CD5
API4
Login/SSO2
AWS ec2-us-west-21

As Semgrep's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

ChangesCSV of Semgrep's changes · Atom feed of Semgrep's changes

None since tracking began.

Rating badge for Semgrep's site

Semgrep transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/semgrep"><img src="https://thirdpartyindex.com/badge/semgrep.svg" alt="Semgrep transparency rating on Third Party Index" height="20"></a>
[![Semgrep transparency rating on Third Party Index](https://thirdpartyindex.com/badge/semgrep.svg)](https://thirdpartyindex.com/vendors/semgrep)