Microsoft Corporation acquired Semmle, a transaction announced in September 2019.
Semmle operates in GitHub (sub-acquisition). Semmle provides a semantic code-analysis engine that lets developers write queries to identify code patterns and security vulnerabilities across large codebases, used by security teams at organizations such as Uber, NASA, Microsoft and Google. GitHub (a Microsoft subsidiary) acquired it to help secure the open-source software supply chain.
Leverage Semmle's community-driven code analysis to identify and prevent security vulnerabilities across the open-source supply chain.
Software security is a community effort; no single company can find every vulnerability or secure the open source supply chain behind everyone's code.Nat Friedman, CEO, GitHub
Advisory firms were not disclosed for this transaction.