Socket

Open source supply chain security platform.

socket.dev

HQ: Remote

Cybersecurity

Company research

Public company, workplace, funding, and market signals

Updated Aug 2, 2026

Overview

Socket is a privately held cybersecurity company building a developer-first software supply-chain security platform. It analyzes open-source dependencies for malicious behavior, vulnerabilities, licensing and reachability, and helps organizations prevent risky code from entering development and production. Socket’s own sources cite both 2020 and 2021 as the founding year; 2020 is used here because the founder’s profile, GitHub organization history and 2026 funding announcement support it.

Primary product

Socket, a software composition analysis and supply-chain protection platform, including dependency monitoring, malicious-package detection, Socket Firewall, reachability analysis, SBOM/policy controls and Certified Patches.

Founded

2020

Headquarters

San Francisco, California, United States

Team size

100+ (Socket said more than 100 people in May 2026; third-party LinkedIn data separately estimated approximately 85, so headcount is approximate)

Work style

Remote

Industry

Computer and network security

Sub-industry

Software supply-chain security; software composition analysis; application security

Offices

San Francisco, California, United States

Palo Alto, California, United States

Stanford, California, United States

Business model

B2B SaaS subscription

Per-developer Team and Business plans

Custom Enterprise contracts

Free tier for individuals and small teams

Free products and accounts for open-source projects

Funding

Stage

Series C / venture-backed private company

Total raised

$125M

Latest round

Series C · May 2026

Latest amount

$60M

Series C

May 2026 · Thrive Capital

$60M

Series B

Oct 2024 · Abstract Ventures

$40M

Series A

Aug 2023 · Andreessen Horowitz (a16z)

$20M

Seed

May 2022

$4.6M

People & investors

Leadership

Feross Aboukhadijeh

Founder & CEO

Ahmad Nassri

Chief Technology Officer

Andrew Becherer

Chief Information Security Officer

Amjed Aboukhadijeh

Vice President of Sales

Anders Søndergaard

Managing Director, Coana; research/reachability leadership after acquisition

Bradley Farias

Head of Open Source Security

Investors

Work & culture

Socket describes a learning-oriented, collaborative, transparent and experimental culture centered on open-source stewardship, developer empathy and securing the internet’s software supply chains. It is hiring across engineering, sales, customer success and threat intelligence.

Work style

Remote

Compensation

Socket says it uses best-in-class salary benchmarking and offers stock options, but public role-specific salary bands were not established. Levels.fyi reported a $196,000 median total compensation for a software engineer, updated July 18, 2026; this is third-party and based on limited reported data.

Benefits

Market-benchmarked compensation

Stock options

Health, dental and vision insurance, largely covered for employees and dependents

Quarterly company offsites

Remote-work flexibility during core hours

Unlimited time off

Product & market

Pricing

Free tier; Team at $25 per developer/month with a five-developer minimum; Business at $50 per developer/month with a 20-developer minimum; Enterprise custom pricing. Annual plans can save up to 20%, and open-source projects remain free.

Differentiators

—Real-time detection and blocking of malicious packages, including threats not yet represented by CVEs
—Install-time Socket Firewall protection before packages reach developer environments or CI
—Content- and behavior-based analysis rather than reliance only on vulnerability databases
—Reachability analysis from Coana to reduce irrelevant vulnerability alerts, with Socket claiming reductions of up to 80–90% depending on tier
—Certified Patches for rapid remediation of exploitable vulnerabilities
—Coverage expanding from packages to browser and editor extensions, MCP servers and AI tools
—Developer-oriented integrations and a free open-source offering

Technology

JavaScript

TypeScript

Python

Java

React

Node.js

GraphQL

PostgreSQL

ClickHouse

Elasticsearch

Docker

Kubernetes

Terraform

Prometheus

Grafana

GitHub Actions

GitLab

Vercel

RabbitMQ

Customers

Anthropic

xAI

Replit

Cursor

Vercel

Figma

Gusto

Mercado Libre

Cribl

Fortune 100 financial-services companies

Global media companies

Competitors

Sonatype

Snyk

Mend

FOSSA

Endor Labs

Ox Security

Oligo Security

Seal Security

Stacklok

JFrog Xray

Scale & contact

Estimated revenue

Approximately $1M–$10M annually; a third-party company profile estimated about $4M, while another dataset estimated $4.2M ARR. These are not company-reported figures.

Estimated monthly visits

577.9K

support@socket.dev

Signals & risks

Acquisition

Apr 2025

Socket acquired Coana and integrated its reachability-analysis technology to reduce vulnerability noise and improve exploitability triage.

Source

Acquisition

Apr 2026

Socket acquired Secure Annex, founded by John Tuckner, to extend supply-chain protection to browser extensions, IDE extensions and AI tools.

Source

Other

May 2026

Socket became a unicorn with its $60 million Series C at a reported $1 billion valuation. The company says it is scaling rapidly and expanding product coverage; no material layoff or shutdown was found in the reviewed sources.

Source

Latest news

Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions

Socket · Jun 2026

Socket announced closed-beta Firewall support for blocking malicious VS Code Marketplace and Open VSX extensions before installation.

Socket raises $60M Series C at $1B valuation led by Thrive Capital to secure AI-driven software development

Socket · May 2026

Socket announced a $60M Series C at a $1B valuation, bringing total funding to $125M, and reported more than 27,000 organizations and over 100 employees.

Socket Has Acquired Secure Annex

Socket · Apr 2026

The acquisition expands Socket’s protection from package managers into browser extensions, IDE extensions, MCP servers and AI tools.

Announcing Precomputed Reachability Analysis in Socket

Socket · Jul 2025

Socket launched precomputed reachability analysis using Coana technology, available for Team and Enterprise customers without source-code access.

Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team

Socket · Apr 2025

Socket acquired Coana and its reachability technology, which Socket says can reduce false positives by up to 80%.

Jobs and careers at Socket

25 jobs at Socket

Vulnerability Research Software Engineer

On-site

Engineering

Remote

2d ago

On-site

Full-time