Trivy vs Semgrep

Side-by-side comparison of Trivy and Semgrep to help you choose the right tool.

Feature	Trivy	Semgrep
Pricing	Free (open source)	Free / $110+/mo
Rating	⭐ 4.6/5	⭐ 4.5/5
Categories	security-scanning, containers-orchestration	security-scanning
Container scanning	✅	❌
Filesystem scanning	✅	❌
IaC scanning	✅	❌
SBOM generation	✅	❌
License scanning	✅	❌
Kubernetes scanning	✅	❌
Pattern matching	❌	✅
Custom rules	❌	✅
Multiple languages	❌	✅
CI/CD	❌	✅
Registry	❌	✅
Auto-fix	❌	✅

All-in-one open-source security scanner

Try Trivy →

Lightweight static analysis for code security

Try Semgrep →