Semgrep vs Cohere
Side-by-side trajectory, velocity, and editorial themes.
Semgrep grinds out weekly gains in language coverage, scan speed, and supply-chain depth
Semgrep is on a steady weekly release train dominated by language-parser fidelity (Dart, Scala, PHP, Python, Java), engine startup and scan performance, and supply-chain plus secrets tooling. Recent releases added transitive dependency-path reporting, binary-file skipping by default, and configurable rule validation, alongside repeated hardening against credential leaks in CI output and telemetry.
The direction is incremental breadth and speed rather than new product surface: more languages parsed accurately, faster rule loading and parsing, and deeper Pro interfile taint analysis. Supply-chain reachability and secrets validation keep getting attention, signaling those remain the commercial focus over the open-source CLI.
Expect continued weekly point releases extending interfile and taint analysis to more languages and further trimming scan startup time; no single release in view signals a directional shift.
Cohere prunes legacy models while pushing into speech and code
Cohere is refreshing and broadening its enterprise model lineup rather than iterating a single stack. In the observable window it has shipped a new flagship tier (Command A+), started a first-party speech-to-text line (Transcribe, now extended to Arabic), and released a code-focused model tied to its North platform (North-Mini-Code) — while retiring older Embed, Aya, and Command versions.
The pattern is consolidate-and-expand: retire legacy models on a fixed schedule and push customers onto the current generation, while adding new capability surfaces beyond text — audio/ASR and code. The multilingual and Arabic transcription work signals a deliberate reach into non-English enterprise markets rather than chasing frontier-model benchmarks head-on.
Expect further language and modality expansion of the Transcribe line and more North-tied specialized models, paired with continued retirement of older Command and Embed versions as the catalog narrows.
See more alternatives to Semgrep →
See more alternatives to Cohere →