Graded C+ on resilience. In Vannus's assessment it routes across several model providers — not captured by one — acceptable, with limits worth knowing.
Semgrep routes across several model providers — not captured by one. This is Vannus's assessment from its curated catalog intel.
Vannus grades Semgrep against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →