Isaac Evans
Founder, CEO at Semgrep
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolIsaac Evans is a founder and CEO with 14 years of experience building security-focused developer tools from research to product, currently leading Semgrep in San Francisco. He combines deep hands-on engineering—contributing core static-analysis features and security rules to the widely used open-source Semgrep project—with startup leadership and fundraising experience from an EIR role at Redpoint. Trained at MIT (SB and MEng EECS), he has a background in robotics and defense research, bringing rigor from DARPA challenge work and DoD science programs to pragmatic product design. Notably, his contributions to Semgrep include implementing the initial Python linting engine and authoring multi-language vulnerability rulesets, reflecting an unusual mix of compiler-like parsing expertise and applied security engineering.
14 years of coding experience
5 years of employment as a software developer
MEng Computer Science, MEng Computer Science at Massachusetts Institute of Technology
Github Skills (18)
static-analysis10
python10
semgrep10
security10
yaml10
python-click9
javascript9
command-line-interface9
command-line9
cli9
python-lib9
testing7
security-scanner7
java7
javas7
Programming languages (15)
Github contributions (5)
semgrep/semgrep
Jan 2020 - Dec 2022
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Role in this project:
Backend Developer
Backend DeveloperContributions:2 releases, 114 reviews, 344 commits in 2 years 10 months
Contributions summary:Isaac's contributions focused on developing features for the `semgrep/semgrep` repository, a static analysis tool. The commits include implementing the initial Semgrep lint in Python, supporting multiple rules within a directory, and refactoring. The user demonstrates understanding of YAML parsing, rule processing and boolean expression evaluation, fundamental aspects of the core functionality of the project.
looklinterpythonr2cjavascript
semgrep/semgrep-rules
Jan 2020 - Apr 2022
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
Role in this project:Security Engineer
Security EngineerContributions:29 reviews, 99 commits, 138 PRs in 2 years 3 months
Contributions summary:Isaac primarily contributed to developing and maintaining security rules for the Semgrep static analysis tool. Their work focused on identifying and correcting various code vulnerabilities and bad coding practices across multiple programming languages, with a focus on Python, Java, JavaScript, and Go. They implemented checks for issues such as insecure configurations, dead code, and exposed credentials, while also maintaining and updating test cases to ensure rule accuracy and coverage. The user’s contributions included adding new rules and refining existing ones to improve the project's ability to detect security flaws.
securitysemgrepsemgrep-rulessemgrep-registryprogram-analysis
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.