Industry

Full profile: LinkedIn

r2c / Semgrep (May 2019–2025) — joined as sgrep’s original author (employee #13); the team rebuilt it into Semgrep (r2c later renamed itself Semgrep) in 2020. Over that time the company grew from ~20 to 150+ employees and from Series A to D funding. See Isaac Evans’ (r2c’s CEO) post Semgrep: stop grepping code for how he credits sgrep and Coccinelle, my earlier tools, as Semgrep’s origin. I’m still, by far, the biggest contributor to the Semgrep codebase (see the contributors graph).
Facebook (Oct 2009 – Oct 2014) — first static analysis hire; introduced OCaml internally and built pfff, which grew into codemap, codegraph, and sgrep. Facebook/Meta’s later OCaml-based type checkers, Hack, Flow, and Pyre, also started from pfff’s parser and common libs.
Pattern Insight (2007) — a few months, during my postdoc, at this small startup doing code search and static analysis tools, co-founded by Yuanyuan Zhou (my ICSE 2009 co-author), Spiros Xanthos, Zhenmin Li, and others; later acquired by VMware. Several co-founders went on to found more companies — Zhou co-founded Whova; Xanthos co-founded Omnition (acquired by Splunk) and is now CEO of Resolve AI.