Wednesday, April 23, 2025

HackerOne and Semgrep Partner to Streamline Code Review for Modern Development.

Related stories

Biostate AI & Weill Cornell to Build AI for Leukemia Care

Biostate AI, a leading innovator in artificial intelligence for...

AuthMind Raises $19.3M to Advance Identity Protection

Observability-based architecture protects identities—human, non-human, and Agentic AI—across all...

Ascertain Secures $10M Series A to Scale Agentic AI Platform

Led by Deerfield Management, with a strategic investment from...

Unstoppable & MyCircle Launch .mycircle for Onchain Networking

Unstoppable Domains, a leading digital identity platform, and myCircle,...

GitLab and AWS Unveil GitLab Duo with Amazon Q to Revolutionize AI-Powered Software Development

GitLab, the most comprehensive AI-powered DevSecOps platform, has officially...
spot_imgspot_img

HackerOne, the leader in human-powered security announced a partnership with code security solution, Semgrep, to combine Semgrep’s automated code security tools with expert support from HackerOne PullRequest code reviewers. Security teams can now analyze code through Semgrep and have PullRequest reviewers validate results to provide recommendations and context. The partnership enables human-in-the-loop testing to improve collaboration between security and development teams to increase the agility, scalability, and accuracy of the entire code review process.

“Friction between development and code security workflows remains a challenge as development assumes more security responsibility,” said Isaac Evans, co-founder and CEO of Semgrep. “But for teams to remain agile and secure, security and development must work closely together. Our joint solution keeps both teams in mind, so workflows stay collaborative and quality code ships faster.”

Modern development teams continue to experience false positives from automated tools that hinder speed, while quality code review can lack scalability for high-velocity teams. HackerOne and Semgrep’s solution integrates natively within pull requests and existing workflows, helping it conform to modern development’s increasingly collaborative structure to deliver relevant and actionable results without disrupting work.

Also Read: Patronus AI and MongoDB Partner to Boost Enterprise Confidence in Generative AI.

Semgrep uses Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secrets scanning to reveal security risks, which PullRequest code reviewers then evaluate to validate reports, provide context, offer specific remediations, and respond to queries so teams can take action quickly.

“Security teams need solutions that match the agility of the modern development teams they support,” said Alex Rice, founder of HackerOne. “Our partnership with Semgrep ensures software teams get the right insights at the right time in their existing workflows — all with context from human reviewers, so developers spend more time writing trustworthy code and less time fighting security tools.”

SOURCE: PRNewsWire

Subscribe

- Never miss a story with notifications


    Latest stories

    spot_img