Compare software

Bandit vs Semgrep: catalog facts
Bandit	Semgrep
Free Free and open source.	Freemium The community scanning engine is free. Commercial platform features are separate.
Windows, macOS, Linux, Command line	macOS, Linux, Command line
Focused on security issues in Python code Ready-made pre-commit hooks	Runs custom or shared rules in development workflows.
Python code only Pattern-based checks can produce false positives	Rule quality and language support affect what it can detect.
Downloadable app	Downloadable app
Open source	Open source
License: Apache-2.0	License: LGPL-2.1
No account needed	Not stated if an account is needed
Works offline	Not stated if it works offline
Official website Full listing and sources Checked September 23, 2026	Official website Full listing and sources Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.