Compare software

Semgrep vs Flawfinder: catalog facts
Semgrep	Flawfinder
Freemium The community scanning engine is free. Commercial platform features are separate.	Free Free and open source under GPL-2.0-or-later.
macOS, Linux, Command line	Windows, macOS, Linux, Command line
Runs custom or shared rules in development workflows.	Ranks potential findings by risk level Can generate HTML, CSV and SARIF output
Rule quality and language support affect what it can detect.	Checks C and C++ source code Findings need investigation and do not replace a security review
Downloadable app	Downloadable app
Open source	Open source
License: LGPL-2.1	License: GPL-2.0-or-later
Not stated if an account is needed	Not stated if an account is needed
Not stated if it works offline	Not stated if it works offline
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked October 8, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.