Opengrep is a community-driven static analysis engine forked from Semgrep CE that finds security issues in code across 30+ languages.
Decisive facts
- Taint-aware pattern matching scans large codebases across 30+ languages
- Existing Semgrep rules work unchanged, so migration keeps current policies
- Unlocked depth: cross-function and cross-file analysis plus Windows support
- Self-contained OCaml binaries ship as signed releases with JSON and SARIF output
Compared with these products
No explicit proprietary baseline is recorded.