Semgrep Learning Guides

This section is all about learning the concepts behind Application Security and Secure Coding with guided tutorials. Whether a seasoned security engineer looking for resources to share with your teams, a developer looking to improve code quality, or just getting started in cybersecurity, we hope you find these guides helpful.

Security Foundations

Learn the fundamentals for how Static Analysis Security Testing (SAST) and Software Composition Analysis (SCA) work and why it matters.

Vulnerabilities

Deep dive into common security risks with code samples for what issues like SQL injection, Cross-Site Scripting, Open Redirects, and more look like.

Secure Coding

Learn how to write code that’s secure by design for popular programming languages with cheat sheets to use as a reference.

Semgrep Academy

Learn core security concepts by viewing video courses led by experts in the field.