# Semgrep Supply Chain: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 11 judge labels across 1 category by 9 of 14 models. Page: https://www.gane.ai/index/it/vendors/semgrep-supply-chain

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 15 | 0% | 11 |

## What the models said for it

- "includes a free tier with reachability analysis, making reachability analysis accessible to budget-conscious teams" (Claude Haiku 4.5, SCA)
- "Move to Semgrep when false positives or exploitability prioritization become a significant problem." (Perplexity Sonar, SCA)
- "highlights Endor Labs, Snyk, and Semgrep Supply Chain as reducing actionable findings by 60–85%" (DeepSeek V4 Flash, SCA)
- "Other top contenders include FOSSA, Safeguard SCA, Socket, Semgrep Supply Chain, and Endor Labs." (Llama 4 Maverick, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 1 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 2 | 0 | 0 | 2 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 1 | 0 | 0 | 1 |
| Llama 4 Maverick | 0 | 2 | 0 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Semgrep Supply Chain, from 36 of the 38 answers that named it (only the models that return a source list).

### Domains cited

- dupple.com: 25
- itechguides.com: 19
- upwind.io: 19
- blog.jetbrains.com: 17
- g2.com: 13
- gane.ai/index: 11
- endorlabs.com: 10
- softwaresuggest.com: 10
- guideflow.com: 9
- raven.io: 9

### Pages cited

- https://dupple.com/learn/best-software-composition-analysis-tools: 25
- https://itechguides.com/best/software-composition-analysis-software: 19
- https://upwind.io/glossary/10-best-software-composition-analysis-tools-for-sca: 19
- https://blog.jetbrains.com/qodana/2025/09/best-software-composition-analysis-tools: 17
- https://endorlabs.com/learn/best-sca-tools-05b7a: 10
- https://softwaresuggest.com/software-composition-analysis-tools: 10
- https://guideflow.com/blog/software-composition-analysis-tools: 9
- https://raven.io/blog/best-software-composition-analysis-tools: 9

## In its own words

What Semgrep Supply Chain's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Fix vulnerabilities in open source dependencies and block malware (https://semgrep.dev/)
- For: AppSec and Dev teams (https://semgrep.dev/pricing)
- Price stated: $0/month/contributor; $30/month/contributor; Custom (https://semgrep.dev/pricing)
- Starting price: 30 (https://semgrep.dev/pricing)
- Free plan or trial: Free Edition (https://semgrep.dev/pricing)
- Certifications: GDPR, SOC 2
- Customers named: Cribl, Homebase, Sola Security, ICE Services, Copper, Fareportal, Tide, Vanta

## What it publishes

Every page semgrep.dev exposes, read 2026-09-29: 1549 addresses. By kind, pages and the last 90 days:

- blog: 316 pages, 0 in the last 90 days, latest undated
- case study: 19 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 8 pages, 0 in the last 90 days, latest undated
- conference or event: 369 pages, 0 in the last 90 days, latest undated
- report or ebook: 1 pages, 0 in the last 90 days, latest undated
- comparison: 11 pages, 0 in the last 90 days, latest undated
- template or tool: 2 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 37 pages, 0 in the last 90 days, latest undated
- news or press: 1 pages, 0 in the last 90 days, latest undated

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.