Socket

Socket builds a developer-first platform that detects and blocks malicious open source packages in real time. Founded in 2021, the company addresses software supply chain attacks by examining the behaviour of dependencies rather than relying on known vulnerability lists. Its Socket Platform applies deep package inspection to surface threats such as malware, typosquatting, hidden code and permission creep before they execute. The company reports that it detects more than 100 zero-day attacks a week.

The technical work spans several domains: malicious package detection, behavioural analysis of dependencies, deep package inspection and real-time threat detection and blocking. Socket cites the finding that more than 90% of modern codebases are drawn from open source, which places the integrity of third-party packages at the centre of its research. The stated design constraint is that detection should not slow development or disrupt developer workflows.

Socket's customers and users are concentrated in the technology, media, healthcare and finance sectors. The company is backed by investors including Andreessen Horowitz. Further detail is available at https://socket.dev/.