Loading organizations...
§ Private Profile · New York City, NY, USA
Semmle is a company.
Semmle has raised $29.0M across 2 funding rounds.
Key people at Semmle.
Semmle has raised $29.0M in total across 2 funding rounds.
Semmle develops a code analysis platform, using its CodeQL query engine for deep semantic software analysis. This technology automates code reviews, tracks developer contributions, and identifies security vulnerabilities. It allows structured querying of codebases through an object-oriented language rooted in advanced academic research.
Founded in December 2006 in Oxford, England, by Oege de Moor, Semmle emerged from pioneering academic work at the University of Oxford. This research focused on innovative program analysis and querying software sources, creating the unique foundation for the company's ability to analyze and secure complex code.
Previously serving financial and government entities, Semmle's technology now powers continuous vulnerability detection within GitHub. Its vision is to democratize advanced code intelligence, enabling global developers and security experts to enhance software quality and mitigate risks with accessible, powerful analysis tools.
Key people at Semmle.
Semmle was a software company specializing in code analysis technology, offering the LGTM platform powered by CodeQL—a semantic code analysis engine for automating code review, tracking developer contributions, identifying security vulnerabilities, and enabling custom queries on codebases.[1][3] It served major enterprises like NASA, Uber, Microsoft, Google, Credit Suisse, and Nasdaq, solving critical problems in software quality, security, and engineering analytics by treating code as queryable data for continuous monitoring and variant analysis.[1][2][4] Founded in 2006 with around $31M in funding, Semmle achieved strong growth, doubling revenue in 2018 before its acquisition by GitHub in September 2019, after which its technology integrated into GitHub's security tools, with free access for open-source projects.[1][3][4]
Semmle spun out from the University of Oxford in December 2006, leveraging research on querying software source code as data, initially for applications like software renovation and application intelligence.[1][3][4] Key founders included CEO Oege de Moor and co-founder Pavel Avgustinov (VP of platform engineering), who built on academic work in object-oriented query languages like QL (now CodeQL).[3][4] Early traction came from industrial tools like SemmleCode for Java analysis in Eclipse, evolving from business analytics for development processes to security-focused variant analysis.[3][7] Pivotal moments included a $2M seed in 2011, $8M Series A in 2014 from Accel Partners, and $21M Series B in 2018 (also led by Accel, totaling $31M raised), fueling expansion to 60 employees across San Francisco (HQ), Oxford, Copenhagen, New York, Seattle, and Valencia.[2][4][7][8] In 2019, it hired its first CSO, Fermín Serna (ex-Google/Microsoft), amid high-profile CVE disclosures.[2]
Semmle rode the shift toward DevSecOps and automated security in software supply chains, enabling "secure all software" by uniting security researchers and developers amid rising zero-day threats and open-source dependencies.[2][5] Timing was ideal post-2010s funding boom for code analytics, aligning with enterprise needs for scalable analysis as codebases exploded (e.g., at FAANG-scale orgs).[2][4] Market forces like CVE proliferation, regulatory pressures (e.g., on supply chain security), and AI-driven tools favored its query-based model, influencing ecosystems via GitHub integration—now powering Advanced Security for millions of repos and standardizing semantic analysis.[1][3] It democratized elite security expertise, boosting open-source safety and enterprise productivity.
Post-2019 GitHub acquisition (under Microsoft), Semmle's CodeQL lives on as a cornerstone of GitHub Advanced Security, with ongoing enhancements in AI-powered querying and broader language support amid rising cyber threats.[1][3] Trends like AI in security, zero-trust dev pipelines, and massive open-source scrutiny will amplify its reach, potentially evolving into fully autonomous vulnerability hunting. Its legacy as a code-to-data pioneer positions it to shape secure software at global scale, fulfilling the original mission from Oxford's labs.
Semmle has raised $29.0M in total across 2 funding rounds.
Semmle's investors include Ping Li, Work-Bench, Accel.
Semmle has raised $29.0M across 2 funding rounds. Most recently, it raised $21.0M Series B in August 2018.
| Date | Round | Lead Investors | Other Investors | Status |
|---|---|---|---|---|
| Aug 21, 2018 | $21M Series B | Ping LI | Work Bench | Announced |
| Sep 16, 2014 | $8M Series A | Accel | — | Announced |
