Semgrep, Inc.

Pattern matching static analysis engine whose rules are written as code snippets with metavariables, with an optional commercial platform for triage.