Socket acquired Coana and integrated its reachability-analysis technology to reduce vulnerability noise and improve exploitability triage.
SourcePublic company, workplace, funding, and market signals
Updated Aug 2, 2026
Socket is a privately held cybersecurity company building a developer-first software supply-chain security platform. It analyzes open-source dependencies for malicious behavior, vulnerabilities, licensing and reachability, and helps organizations prevent risky code from entering development and production. Socket’s own sources cite both 2020 and 2021 as the founding year; 2020 is used here because the founder’s profile, GitHub organization history and 2026 funding announcement support it.
Primary product
Socket, a software composition analysis and supply-chain protection platform, including dependency monitoring, malicious-package detection, Socket Firewall, reachability analysis, SBOM/policy controls and Certified Patches.
Founded
2020
Headquarters
San Francisco, California, United States
Team size
100+ (Socket said more than 100 people in May 2026; third-party LinkedIn data separately estimated approximately 85, so headcount is approximate)
Work style
Remote
Industry
Computer and network security
Sub-industry
Software supply-chain security; software composition analysis; application security
Offices
Business model
Leadership
Founder & CEO
Chief Technology Officer
Andrew Becherer
Chief Information Security Officer
Amjed Aboukhadijeh
Vice President of Sales
Anders Søndergaard
Managing Director, Coana; research/reachability leadership after acquisition
Bradley Farias
Head of Open Source Security
Investors
Socket describes a learning-oriented, collaborative, transparent and experimental culture centered on open-source stewardship, developer empathy and securing the internet’s software supply chains. It is hiring across engineering, sales, customer success and threat intelligence.
Work style
Remote
Compensation
Socket says it uses best-in-class salary benchmarking and offers stock options, but public role-specific salary bands were not established. Levels.fyi reported a $196,000 median total compensation for a software engineer, updated July 18, 2026; this is third-party and based on limited reported data.
Benefits
Pricing
Free tier; Team at $25 per developer/month with a five-developer minimum; Business at $50 per developer/month with a 20-developer minimum; Enterprise custom pricing. Annual plans can save up to 20%, and open-source projects remain free.
Differentiators
Technology
Customers
Competitors
Estimated revenue
Approximately $1M–$10M annually; a third-party company profile estimated about $4M, while another dataset estimated $4.2M ARR. These are not company-reported figures.
Estimated monthly visits
577.9K
Socket acquired Coana and integrated its reachability-analysis technology to reduce vulnerability noise and improve exploitability triage.
SourceSocket acquired Secure Annex, founded by John Tuckner, to extend supply-chain protection to browser extensions, IDE extensions and AI tools.
SourceSocket became a unicorn with its $60 million Series C at a reported $1 billion valuation. The company says it is scaling rapidly and expanding product coverage; no material layoff or shutdown was found in the reviewed sources.
SourceSocket · Jun 2026
Socket announced closed-beta Firewall support for blocking malicious VS Code Marketplace and Open VSX extensions before installation.
Socket · May 2026
Socket announced a $60M Series C at a $1B valuation, bringing total funding to $125M, and reported more than 27,000 organizations and over 100 employees.
Socket · Apr 2026
The acquisition expands Socket’s protection from package managers into browser extensions, IDE extensions, MCP servers and AI tools.
Socket · Jul 2025
Socket launched precomputed reachability analysis using Coana technology, available for Team and Enterprise customers without source-code access.
Socket · Apr 2025
Socket acquired Coana and its reachability technology, which Socket says can reduce false positives by up to 80%.