Socket

Behavioral SCA that blocks malicious packages at install time, before a CVE exists.

Proof of life. Raised $60M Series C at a $1B valuation led by Thrive Capital, May 2026

Socket inspects what a dependency actually does (network, filesystem, install scripts, obfuscation) instead of waiting for a CVE. Firewall stops the package at npm/PyPI install, reachability (via Coana) cuts the CVE noise, and Certified Patches land a surgical fix without a full upgrade. That is the tool AI-coding shops use when Copilot pulls in a package nobody read.

Category: Software supply chain
Headquarters: San Francisco, USA
Country: USA
Founded: 2022
Funding stage: Series C
Total funding: $125M
Website: https://socket.dev

Investors

Thrive CapitalAndreessen HorowitzAbstract VenturesCapital One Ventures