Semgrep is an open-source static analysis tool helping customers copyedit their software for security issues by checking it against relevant coding language rules. The company, formerly known as r2c, delivers this tool as a SaaS service, that aims to help companies take advantage of the security benefits it offers.

• Mutual respect - We respect each other enough to tell the truth, no matter what. We share our concerns and disagreements openly, as well as our praise and appreciation. We are up-front with what we can deliver, and identify unattainable goals early. When we are unsure about something, we ask.
• Mission driven - We believe we can make a positive impact on the world by empowering everyone to use static analysis. This means we design our tasks, projects, and initiatives in service of that mission, so that together as a team we can create something that truly makes a difference.
• Honesty - Each member of our team honestly evaluates their work to understand its impact on our users, the company, and the community at large. The world evolves, and we do with it, even if that means giving up on a cherished project when it no longer makes sense.
• Impact - Every team member prioritizes work that has the largest impact they can deliver on our users, each other, the company, and the world at large. We critically evaluate projects for impact, and discard work that does not deliver direct value.