No release verdicts yet. Scored jobs show how many tools were tested. The rest are not tested.

Queue

Vibe coding

Semgrep

Static analysis and secrets scanning

Price and free tier

Free tier + paid; OSS engine

Free tier

Checked 15 Oct 2026 · Source (opens in a new tab)

Jobs this tool is filed under

Scan a seeded repo with a leaked API key, SQL injection and a vulnerable dependency; count true/false positives.

Job resultWeight 40
16
Speed and effortWeight 15
13
Price and free tierWeight 15
13
Ease of startWeight 10
8
Reliability and trustWeight 10
8
Community signalWeight 10
7

Last tested: 15 Oct 2026. Evidence: Semgrep 1.181.0. Scored scan: p/javascript, p/secrets, p/security-audit, p/owasp-top-ten in 5s, 2 findings. p/supply-chain ran 1 rule, 0 findings, and asked for semgrep login. 2 of 5 planted defects, 0 false positives. Evidence: evidence/2026-10-16/vc5/semgrep/.

Other candidates for the same jobs

Link check: verified 200 (2026-10-15). Questions: hello@toolfitly.com.

Newsletter

The weekly ranking note

One email when a job gets a tested top five, a price changes, or a tool ships something we re-test. No sponsored placements.