Sourcery vs Semgrep

Summary

Sourcery vs Semgrep (Code Review & Security). Agent test scores: Sourcery 8.8/10, Semgrep 8.1/10. Sourcery scored 0.7 higher overall in our separate rubric v0.1 tests (editions and tasks can differ — see Edition tested and the notes below). Pricing: Sourcery — Pro $15/seat/mo ($12 annual); Team $30 ($24 annual); Semgrep — Teams $30/contributor/mo (Code or Supply Chain); Secrets $15.

Every fact on this page comes from our tool records and test logs. Last updated:

Key facts

Sourcery

VibeToolRank score
8.8/10
Last tested
2026-10-16
Runs
1 (single run)
Outcome score
9.5/10
Edition tested
Sourcery GitHub app, Team trial then Open Source plan, benchmark R1
Free plan, as measured
Our review ran on a public repo; the free Open Source plan covers public repos only
Free plan
Yes: free for open-source repos
Price
Pro $15/seat/mo ($12 annual); Team $30 ($24 annual)
Pricing checked
2026-10-16

Semgrep

VibeToolRank score
8.1/10
Last tested
2026-10-16
Runs
3 runs
Outcome score
6/10
Edition tested
Semgrep Community Edition (open-source CLI, registry rules), not Semgrep AppSec Platform
Free plan
Yes: up to 10 contributors
Price
Teams $30/contributor/mo (Code or Supply Chain); Secrets $15
Pricing checked
2026-10-16

Side by side

FieldSourcery Semgrep
What it isSourceryAI code reviewer.SemgrepStatic analysis and security scanning.
PricingSourceryPro $15/seat/mo ($12 annual); Team $30 ($24 annual)SemgrepTeams $30/contributor/mo (Code or Supply Chain); Secrets $15
Free tierSourceryYes: free for open-source reposSemgrepYes: up to 10 contributors
Pricing verifiedSourcery2026-10-16Semgrep2026-10-16
Edition testedSourcerySourcery GitHub app, Team trial then Open Source plan, benchmark R1SemgrepSemgrep Community Edition (open-source CLI, registry rules), not Semgrep AppSec Platform
Tested onSourcery2026-10-16Semgrep2026-10-16
Outcome scoreSourcery9.5Semgrep6
Speed scoreSourcery8Semgrep10
Cost scoreSourcery10Semgrep10
Developer experience scoreSourcery7Semgrep8
Reliability scoreSourcery8Semgrep10
Overall scoreSourcery8.8Semgrep8.1

What our tests found

Sourcery

On our seeded R1 pull request with 6 planted bugs, Sourcery caught all 6 with sensible severities, including the SQL injection and, through its secret scanner, the hardcoded key. It also raised a speculative SSRF warning. The review came about 2.5 minutes after we asked with '@sourcery-ai review'. Caveat: it reviewed after CodeRabbit and Greptile had already commented on the same PR. Single run.cloud trial

Pros
  • Caught all 6 planted bugs with sensible severities
  • Secret scanner flagged the hardcoded key
  • Free forever on public repositories, including security checks
  • Trial needs no card
Cons
  • Didn't auto-review an already-open PR; needed an '@sourcery-ai review' comment
  • Rewrote the PR description automatically
  • Raised a speculative SSRF warning, and its review comment appeared twice
  • Reviewed after two other bots had commented on the same PR, so its result may be flattered

Who it’s for: Open-source maintainers and small teams who want thorough AI reviews and security checks on GitHub or GitLab.

Semgrep

Seeded-repo scan, 3 runs: 6/10 issues found, 0 false positives. Missed secrets, MD5, yaml.load, DOM XSS.open-source CLI

Pros
  • Zero false positives across 3 scans of our seeded repo
  • Free for up to 10 contributors
  • Scans run locally from the CLI
Cons
  • Found only 6 of 10 seeded issues
  • Missed hardcoded secrets, MD5, yaml.load and DOM XSS in our repo

Who it’s for: Teams that want a fast, low-noise static analysis baseline in CI.

Verdict

Scores use rubric v0.1 from separate runs. Editions and tasks can differ (see Edition tested and What our tests found); some tests were a single run, which caps reliability scores. Overall: Sourcery 8.8, Semgrep 8.1. Check the free-tier limits above against your project before choosing.

FAQ

Which is better, Sourcery or Semgrep?

In our tests Sourcery scored higher overall (8.8/10 vs 8.1/10). Scores use the same rubric (v0.1) but came from separate runs; editions and tasks may differ (see Edition tested and test summaries), so check the per-dimension scores for what matters to you.

Is Sourcery free?

Yes: free for open-source repos (pricing checked 2026-10-16).

Is Semgrep free?

Yes: up to 10 contributors (pricing checked 2026-10-16).

How much does Sourcery cost compared with Semgrep?

Sourcery: Pro $15/seat/mo ($12 annual); Team $30 ($24 annual). Semgrep: Teams $30/contributor/mo (Code or Supply Chain); Secrets $15.

Best Code Review & Security · Best free Code Review & Security · All comparisons · Methodology

Related

Other Code Review & Security tools

Best Code Review & Security · Best free Code Review & Security

Scores come from our own tests and are never for sale; sponsored placements are always labelled. Some links are affiliate links (currently Railway). Disclosure