# Semgrep AI agent for Slack & Microsoft Teams Viktor is an AI employee that connects to Semgrep with a scoped API key and helps you build, test, and deploy code through CI/CD pipelines, running 5 Semgrep actions for you like Get Projects, Get Findings, and Update Project. Ask in plain English in Slack or Microsoft Teams; Viktor does the work in Semgrep and reports back. Setup takes about two minutes. - Tool: Semgrep - Category: Developer Tools - Connection: API key - Actions available: 5 - Works from: Slack and Microsoft Teams - Page: https://viktor.com/integrations/semgrep ## What can you ask Viktor to do in Semgrep? - "Check Semgrep for the latest failed build and summarize the likely cause." - "Trigger a deploy in Semgrep for the latest release and report when it's done." - "Watch Semgrep for failed pipelines and post a summary here with the likely cause." - "Summarize what shipped through Semgrep this week for the changelog." ## What can Viktor do in Semgrep? (5 actions) - **List Deployment Slug Options** - Retrieves available options for the Deployment Slug field. - **Update Project** - Update a project on Semgrep. - **Get Projects** - Returns a list of projects for a given deployment slug. - **Get Findings** - Returns a list of findings for a specified deployment. - **Get Deployments** - Returns a list of deployments. ## How does Viktor work with Semgrep? 1. Add Viktor to Slack or Microsoft Teams. 2. Connect Semgrep with an API key - Viktor handles authentication. 3. Ask in plain English. Viktor runs the Semgrep actions, chains them with your other tools when needed, and reports back. Sensitive actions wait for your approval. ## What is a Semgrep AI agent? A Semgrep AI agent is an AI that connects to your Semgrep account and completes work in it - it doesn't just answer questions about Semgrep, it takes the actions. Viktor is that agent: an AI employee that works in Semgrep on your behalf and delivers the finished result in Slack or Microsoft Teams. Unlike workflow builders such as Zapier or Make, there is nothing to configure - no triggers to map, no workflows to maintain. You describe the outcome in plain English, and Viktor picks the right Semgrep actions, chains them with the other 3,200+ tools it connects to, and asks for approval before anything sensitive runs. ### About Semgrep A fast, open-source, static analysis tool for profoundly improving software security and reliability. ## Security and permissions - Scoped API keys - Viktor stores your key securely, uses only the scopes you grant, and you can revoke it at any time. - Review-first approvals: sensitive Semgrep actions wait for your sign-off before they run. - Isolated compute per team, encrypted in transit and at rest - and your data is never used to train models. - SOC 2 Type 1 compliant, with Type 2 and ISO 27001 in progress. ## FAQ ### Does Viktor integrate with Semgrep? Yes. Semgrep is one of the 3,200+ tools Viktor connects to, via a managed connector. Once connected, anyone on your team can put Viktor to work in Semgrep from Slack or Microsoft Teams - no workflow builder, no code. ### How do I connect Semgrep to Viktor? Ask Viktor in Slack or Microsoft Teams to connect Semgrep, then paste an API key from your Semgrep account when prompted. Viktor stores the key securely, uses only the scopes you grant, and you can revoke it at any time. Setup takes about two minutes. ### What can Viktor do in Semgrep? Viktor can run 5 Semgrep actions, including Get Projects, Get Findings, and Update Project - and chain them with other tools in a single request. In practice that means Viktor helps you build, test, and deploy code through CI/CD pipelines. If a task spans several actions, Viktor plans the sequence itself and reports back when the work is done. ### Do I need to build workflows to automate Semgrep? No. Viktor isn't a workflow builder - there are no triggers to map and no workflows to maintain. You ask for the outcome in plain English in Slack or Microsoft Teams, and Viktor decides which Semgrep actions to take, runs them, and reports back. ### Is my Semgrep data secure with Viktor? Yes. Viktor connects to Semgrep with a scoped API key, runs in an isolated environment per team, and never trains models on your data. Sensitive actions wait for your approval, and you can revoke access at any time. Viktor is SOC 2 Type 1 compliant, with Type 2 and ISO 27001 in progress. ### How much does the Semgrep integration cost? Nothing extra - every integration, including Semgrep, is available on every plan. You can start free with up to $100 in credits, no credit card required; paid plans start at $50/month. ### Can Viktor use Semgrep together with my other tools? Yes - that's the point. Viktor connects to 3,200+ tools and works across them in a single run: it can pull data from Semgrep, cross-reference it with another tool - for example Slack or Gmail, and deliver the finished result in Slack or Microsoft Teams. ## Viktor uses Semgrep together with - [Slack](https://viktor.com/integrations/slack) - [Gmail](https://viktor.com/integrations/gmail) - [Google Sheets](https://viktor.com/integrations/google-sheets) - [HubSpot](https://viktor.com/integrations/hubspot) - [Notion](https://viktor.com/integrations/notion) - [Salesforce](https://viktor.com/integrations/salesforce) ## More Developer Tools integrations - [Pipedream Utils](https://viktor.com/integrations/pipedream-utils) - [Databricks (OAuth - Service Principal)](https://viktor.com/integrations/databricks-oauth-service-principal) - [PagerDuty](https://viktor.com/integrations/pagerduty) - [Universal API](https://viktor.com/integrations/universal-api) - [ServiceNow](https://viktor.com/integrations/servicenow) - [Formatting](https://viktor.com/integrations/formatting) - [Helper Functions](https://viktor.com/integrations/helper-functions) - [Snipe-IT](https://viktor.com/integrations/snipe-it) ## Get started Viktor is free to start - up to $100 in credits, no credit card required. All 3,200+ integrations are included on every plan. Sign up at https://viktor.com or browse all integrations at https://viktor.com/integrations.