The open source code security engine
Imagine a world where static code analysis is scalable, accessible, and impactful for all. Opengrep is a true open-source detection engine to unlock security for every developer, share insights, and transform AppSec into a global force for secure innovation.
Opengrep accepts community PRs on merit and invites contributors to participate in open roadmap sessions, with governance transitioning to foundation management for long-term community control
Opengrep is a fully open-source SAST engine that does not hide essential scanning capabilities behind commercial licenses, ensuring long-term access to core features and preventing vendor lock-in
Opengrep supports backward compatibility with common JSON and SARIF outputs, enabling seamless integration into existing security workflows and tools
Opengrep unlocks previously restricted capabilities including inter-procedural analysis, cross-file analysis, and extended language support that were removed from competing open-source forks