---
title: "Opengrep SAST After One Year: Faster, Deterministic Static Analysis"
url: https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy
source_url: https://www.aikido.dev/blog/opengrep-sast-one-year
type: article
source: "Aikido Security"
published: 2026-05-12T12:43:46.890Z
updated: 2026-05-12T12:44:13.664Z
tags: ["ocaml"]
reading_time: 7
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Opengrep SAST After One Year: Faster, Deterministic Static Analysis

**[Aikido Security](https://daily.dev/sources/aikido-security)** · 7 min read · 0 upvotes · 0 comments

## Summary

One year after forking Semgrep, Opengrep has shipped 43 releases and achieved 25–74% faster scans and up to 2× faster taint analysis. Key technical advances include migrating to OCaml 5 with shared-memory parallelism, introducing intrafile cross-function taint analysis via --taint-intrafile, adding native Windows support, and removing Python dependencies for a self-contained binary. The project has 1.74 million binary downloads, 2,000+ GitHub stars, and 10 security companies using it in production. The post also addresses a PyPI package name security incident, governance structure under LGPL-2.1, and the case for deterministic SAST alongside AI-based scanning in CI/CD pipelines. Upcoming priorities include interfile taint analysis, full removal of the Python wrapper, and broader package manager distribution.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.aikido.dev/blog/opengrep-sast-one-year>

## Similar posts on daily.dev

- [Introducing our open source AI-native SAST](https://daily.dev/posts/introducing-our-open-source-ai-native-sast-ufkhzq6e7) · Datadog · 16 upvotes · 0 comments
- [OpenGrep Security Inspections](https://daily.dev/posts/opengrep-security-inspections-l9ahuzxkk) · JetBrains · 1 upvotes · 0 comments
- [How pairing SAST with AI dramatically reduces false positives in code security](https://daily.dev/posts/how-pairing-sast-with-ai-dramatically-reduces-false-positives-in-code-security-r208wlnco) · InfoWorld · 0 upvotes · 0 comments

---

Tags: [#ocaml](https://daily.dev/tags/ocaml)

[View this post on daily.dev](https://daily.dev/posts/opengrep-sast-after-one-year-faster-deterministic-static-analysis-icreckgwy)