DEVOPSdigest

Semgrep announced its public beta of Semgrep Secrets, a product for detecting and securing sensitive credentials during the software development process.

Semgrep is designed for engineers - software and security alike - who need to maintain a fast cadence of software development and solve the root causes of security issues.

Key benefits of Semgrep Secrets include:

Detect and fix secrets with high precision:
- Detect secrets and how they are used using Semgrep's semantic analysis.
- Reduce false positives by prioritizing fixing of valid credentials.
- Detect secrets that are specific to your internal services.

Fix secrets without developer friction:
- Minimize developer alert fatigue from false positives.
- Get secrets-related findings directly in the developer workflow.
- Prevent secrets from being committed to your code repository.

Leveraging a single pane-of-glass for application security:
- Find and remediate security issues in your code, software supply chain, and secrets using one platform.

"Semgrep Secrets is launching with features that immediately make it a best-in-class tool for secrets detection, and some that we believe are completely novel, like leveraging semantic analysis for hard-coded credentials. The impact is that only relevant issues are flagged to developers without them having to leave their workflow. We launched this product to beta in 107 days and I'm super excited for what the team behind it will ship next!" said Isaac Evans, CEO and co-founder at Semgrep.