Semgrep and Gitleaks: documented facts side by side
Both tools document security tests. 7 of 9 fields differ. The comparison lists facts from each tool's own pages and does not rate either tool.
Field by field
| Field | Semgrep | Gitleaks | Status |
|---|---|---|---|
| Licence | freemium | open-source | differs |
| Hosting | cloud, self-hosted | self-hosted | differs |
| Test classes documented | Security tests | Security tests | same |
| Test languages | YAML | TOML | differs |
| CI integrations named in docs | Azure Pipelines, Bitbucket Pipelines, Buildkite, CircleCI, GitHub Actions, GitLab CI/CD, Jenkins, Semaphore | GitHub Actions | differs |
| Platforms | backend, infra, web | not published | differs |
| Published price | from 0 USD per month per contributor | not published | differs |
| First release | not published | not published | same |
| Vendor or maintainer | Semgrep, Inc. | Truffle Security | differs |
Only on this page
Curated angle for this pair: test class scope.
The field with the largest difference is ci integrations named in docs: Semgrep lists Azure Pipelines, Bitbucket Pipelines, Buildkite, CircleCI, GitHub Actions, GitLab CI/CD, Jenkins, Semaphore; Gitleaks lists GitHub Actions.
Questions
What is the difference between Semgrep and Gitleaks?
The field with the largest difference is ci integrations named in docs: Semgrep lists Azure Pipelines, Bitbucket Pipelines, Buildkite, CircleCI, GitHub Actions, GitLab CI/CD, Jenkins, Semaphore; Gitleaks lists GitHub Actions.
What is Semgrep, and what is Gitleaks?
Semgrep: freemium, documents security. Gitleaks: open-source, documents security.
Which test classes do Semgrep and Gitleaks each document?
Semgrep: security tests. Gitleaks: security tests.
Are Semgrep and Gitleaks free?
Semgrep: freemium; price from 0 USD. Gitleaks: open-source; price not published.
Are Semgrep and Gitleaks open source or commercial?
Semgrep: freemium. Gitleaks: open-source.
What are the key differences between Semgrep and Gitleaks in hosting and CI integrations?
Semgrep: hosting self-hosted, cloud; CI integrations GitHub Actions, GitLab CI/CD, Jenkins, Bitbucket Pipelines, CircleCI, Buildkite, Azure Pipelines, Semaphore. Gitleaks: hosting self-hosted; CI integrations GitHub Actions.