--- title: Opengrep SAST After One Year: Faster, Deterministic... description: One year after forking Semgrep, Opengrep has shipped 43 releases and achieved 25–74% faster scans and up to 2× faster taint analysis. Key technical advances... canonical: https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Opengrep SAST After One Year: Faster, Deterministic Static Analysis | daily.dev og:description: One year after forking Semgrep, Opengrep has shipped 43 releases and achieved 25–74% faster scans and up to 2× faster taint analysis. Key technical advances... og:url: https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy og:image: https://api.daily.dev/og/posts/IcREckGWy.png og:image:alt: Opengrep SAST After One Year: Faster, Deterministic Static Analysis og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Opengrep SAST After One Year: Faster, Deterministic Static Analysis **[Aikido Security](https://daily.dev/sources/aikido-security)** · 7 min read · 0 upvotes · 0 comments ## Summary One year after forking Semgrep, Opengrep has shipped 43 releases and achieved 25–74% faster scans and up to 2× faster taint analysis. Key technical advances include migrating to OCaml 5 with shared-memory parallelism, introducing intrafile cross-function taint analysis via --taint-intrafile, adding native Windows support, and removing Python dependencies for a self-contained binary. The project has 1.74 million binary downloads, 2,000+ GitHub stars, and 10 security companies using it in production. The post also addresses a PyPI package name security incident, governance structure under LGPL-2.1, and the case for deterministic SAST alongside AI-based scanning in CI/CD pipelines. Upcoming priorities include interfile taint analysis, full removal of the Python wrapper, and broader package manager distribution. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Introducing our open source AI-native SAST](https://daily.dev/posts/introducing-our-open-source-ai-native-sast-ufkhzq6e7) · Datadog · 16 upvotes · 0 comments - [OpenGrep Security Inspections](https://daily.dev/posts/opengrep-security-inspections-l9ahuzxkk) · JetBrains · 1 upvotes · 0 comments - [Best SAST Tools 2026: Aikido, Snyk, Semgrep and More](https://daily.dev/posts/best-sast-tools-2026-aikido-snyk-semgrep-and-more-umehwikfh) · Aikido Security · 0 upvotes · 0 comments - [How pairing SAST with AI dramatically reduces false positives in code security](https://daily.dev/posts/how-pairing-sast-with-ai-dramatically-reduces-false-positives-in-code-security-r208wlnco) · InfoWorld · 0 upvotes · 0 comments - [AI SAST: Code Security for the Agentic SDLC](https://daily.dev/posts/ai-sast-code-security-for-the-agentic-sdlc-sxvc4pirt) · SD Times · 0 upvotes · 0 comments --- Tags: [#ocaml](https://daily.dev/tags/ocaml) [View this post on daily.dev](https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Opengrep SAST After One Year: Faster, Deterministic Static Analysis","url":"https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy"},"datePublished":"2026-05-12T12:43:46.890Z","dateModified":"2026-05-12T12:44:13.664Z","description":"One year after forking Semgrep, Opengrep has shipped 43 releases and achieved 25–74% faster scans and up to 2× faster taint analysis. Key technical advances...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/21b16ecb60ba133c333e516bbf321e5e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/21b16ecb60ba133c333e516bbf321e5e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Aikido Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Aikido Security","logo":"https://media.daily.dev/image/upload/s--vJDqDYv_--/f_auto,q_auto/v1774959928/logos/aikido-security?_a=BAMAMiWQ0","url":"https://daily.dev/sources/aikido-security"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ocaml","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Aikido Security","item":"https://daily.dev/sources/aikido-security"},{"@type":"ListItem","position":3,"name":"Opengrep SAST After One Year: Faster, Deterministic Static Analysis"}]} ```