Companies / security
Semgrep
168incidents since 2022-06-29
59major or critical
14in the last 90 days
0silently edited or deleted
Recent notable changes
| When (UTC) | Change | Kind |
|---|---|---|
| Major incident: Intermittent login failures on semgrep.dev Semgrep reported a major Login/SSO outage causing intermittent semgrep.dev login failures for GitHub and GitLab users, who could see an "unrecoverable error" after clicking Continue. It started at 2026-10-05 16:00 UTC and lasted 14 min, resolving at 2026-10-05 16:14 UTC after a fix was rolled out. | Major incident | |
| Major incident: Interruption to Scans and Accessing Web App Semgrep reported a major outage preventing Managed Scans and CI scans from completing because findings could not upload, alongside web UI access issues. It started at 2026-09-22 19:24 UTC and resolved at 2026-09-22 19:37 UTC, lasting 12 min. Engineering initiated a rollback and confirmed all products operational. | Major incident | |
| Major incident: Incomplete Semgrep 1.176.1 release: PyPI installs cannot use Pro Engine Semgrep reported a major outage starting 2026-09-04 23:13 UTC: an incomplete 1.176.1 patch release prevented PyPI installations from using Pro Engine. It recommended installing 1.175.1 or 1.176.0 temporarily. Resolved at 2026-09-04 23:38 UTC after 24 min, Pro Engine could again be installed and used normally with Semgrep 1.176.1 via PyPI. | Major incident | |
| Major incident: SMS Scans Degraded Semgrep reported a major degradation of SMS Managed Scans starting 2026-09-03 21:35 UTC, lasting 1 h 10 min and resolving at 2026-09-03 22:45 UTC. The vendor attributed the disruption to an AWS STS outage in us-west-2 and confirmed full recovery of all Semgrep products at resolution. | Major incident | |
| Critical incident: Widespread errors on Semgrep AppSec Platform Semgrep reported a critical incident affecting Dashboard and Scans and CI/CD, starting 2026-08-25 19:21 UTC and lasting 2 h 40 min. A bad release caused widespread platform failures; rollback restored stability, and a successful release fully resolved the issue at 2026-08-25 22:01 UTC. | Major incident | |
| Major incident: Lockfileless scans failing for certain deployments Semgrep reported a major incident affecting Managed Scans: lockfileless scans failed for certain deployments from 2026-08-12 18:16 UTC until resolution at 2026-08-12 21:03 UTC, lasting 2 h 46 min. A fix was rolled out by 2026-08-12 20:23 UTC, restoring scans; no specific root cause was disclosed. | Major incident | |
| Major incident: Custom SSO Login Issues Customers with custom SSO configurations could not log in to Semgrep and saw 504 Gateway Timeout errors. The major-impact incident started at 2026-07-16 09:38 UTC and was resolved at 2026-07-16 12:46 UTC, lasting 3 h 7 min. Semgrep stated that the third-party vendor resolved it. | Major incident | |
| Major incident: Scan failures with exit code 7 due to invalid rule | Major incident | |
| Major incident: Logins are failing for users via GitHub auth | Major incident | |
| Major incident: Scheduling delays for Semgrep Managed Scanning (SMS) | Major incident |
Full Semgrep change timeline, with diffs →
Status incident history
Semgrep status incidents per year
Data table
| Year | Incidents | Major/critical |
|---|---|---|
| 2022 | 4 | 4 |
| 2023 | 18 | 8 |
| 2024 | 35 | 15 |
| 2025 | 64 | 14 |
| 2026 | 47 | 18 |
Incidents per month, last 36 months
criticalmajorminornonemaintenanceunknown
Data table
| Month | Impact | Incidents |
|---|---|---|
| 2023-10 | major | 1 |
| 2024-01 | major | 1 |
| 2024-01 | minor | 2 |
| 2024-02 | major | 1 |
| 2024-02 | none | 1 |
| 2024-03 | minor | 4 |
| 2024-03 | none | 1 |
| 2024-04 | critical | 1 |
| 2024-04 | none | 1 |
| 2024-07 | critical | 1 |
| 2024-07 | minor | 2 |
| 2024-07 | none | 1 |
| 2024-08 | major | 3 |
| 2024-08 | minor | 1 |
| 2024-08 | none | 1 |
| 2024-09 | critical | 1 |
| 2024-09 | major | 3 |
| 2024-09 | minor | 3 |
| 2024-10 | critical | 1 |
| 2024-10 | major | 1 |
| 2024-10 | none | 1 |
| 2024-11 | minor | 2 |
| 2024-12 | major | 2 |
| 2025-01 | major | 2 |
| 2025-01 | minor | 1 |
| 2025-02 | minor | 2 |
| 2025-02 | none | 1 |
| 2025-03 | minor | 3 |
| 2025-03 | none | 1 |
| 2025-04 | minor | 2 |
| 2025-05 | minor | 2 |
| 2025-06 | minor | 4 |
| 2025-07 | major | 4 |
| 2025-07 | minor | 2 |
| 2025-07 | none | 1 |
| 2025-08 | major | 1 |
| 2025-08 | minor | 5 |
| 2025-08 | none | 2 |
| 2025-09 | critical | 1 |
| 2025-09 | minor | 4 |
| 2025-09 | none | 4 |
| 2025-10 | major | 4 |
| 2025-10 | minor | 7 |
| 2025-11 | major | 1 |
| 2025-11 | minor | 4 |
| 2025-11 | none | 1 |
| 2025-12 | major | 1 |
| 2025-12 | minor | 3 |
| 2025-12 | none | 1 |
| 2026-01 | major | 2 |
| 2026-01 | minor | 3 |
| 2026-02 | minor | 4 |
| 2026-03 | critical | 1 |
| 2026-03 | major | 2 |
| 2026-03 | minor | 3 |
| 2026-04 | critical | 1 |
| 2026-04 | major | 2 |
| 2026-04 | minor | 4 |
| 2026-04 | none | 2 |
| 2026-05 | major | 2 |
| 2026-05 | minor | 2 |
| 2026-06 | major | 1 |
| 2026-06 | minor | 1 |
| 2026-06 | none | 1 |
| 2026-07 | major | 1 |
| 2026-07 | minor | 2 |
| 2026-07 | none | 1 |
| 2026-08 | critical | 1 |
| 2026-08 | major | 1 |
| 2026-08 | none | 1 |
| 2026-09 | major | 3 |
| 2026-09 | minor | 1 |
| 2026-09 | none | 3 |
| 2026-10 | major | 1 |
| 2026-10 | minor | 1 |
Silent edits
No silent edits or deletions detected for Semgrep yet. We compare every 10-minute snapshot of each incident.
The Weekly Rewind: one short weekly email on what changed at Semgrep and the other vendors we track, including silent edits. Subscribe →
Pricing, trust and legal pages
Page snapshot history
Data table
| Date | Page | Change |
|---|---|---|
| 2026-10-17 | Privacy policy | baseline |
| 2026-10-17 | Terms of service | baseline |
| 2026-10-17 | Pricing | baseline |
| Page | URL | Versions | Last changed | Last fetched OK | History |
|---|---|---|---|---|---|
| Privacy policy | semgrep.dev/privacy | 1 | 2026-10-17 | 2026-10-17 | none yet |
| Terms of service | semgrep.dev/terms | 1 | 2026-10-17 | 2026-10-17 | none yet |
| Pricing | semgrep.dev/pricing | 1 | 2026-10-17 | 2026-10-17 | none yet |
No changes since the first snapshot. Each change links to its diff: the changed passages with a few words of context, never a full copy of the page.
Incident timeline
Latest 100 of 168 incidents. Full list: last 90 days · JSON · Markdown