Skip to content
COLD START / catalog / c/socketretrieved 2026-05-20T15:57 UTC · 16 sources read

Socket

Socket sells open source dependency security to engineering and AppSec teams, detecting and blocking malicious packages in real time rather than flagging known CVEs after the fact.

socket.dev · San Francisco

CALL NO.CS·SOCKET·26
StageSeries CMay 2026 · led by Thrive Capital[5]
Raised$125Mdisclosed rounds[1][5][10][11][12]
Headcountnot publicly disclosedno source in ledger
Valuationnot publicly disclosedno source in ledger
Founded2020[1][11]
Money

Raised $125M across disclosed rounds.[1][5][10][11][12]

Series C closed May 2026, led by Thrive Capital.[5]

post-money valuation is not publicly disclosed.

Named investors include Abstract Ventures, Andreessen Horowitz, Thrive Capital, Elad Gil, Unusual Ventures, Wndrco, Bret Taylor, Phil Venables, Scott Johnston, Christina Cacioppo, Ann Mather, Tobias Lütke, Jerry Yang, Jeff Lawson, Dylan Field, Nat Friedman, Guillermo Rauch, Jawed Karim, Aaron Levie, Arash Ferdowsi, Michael Ovitz, Freddy Kerrest.[1][3][5][6][10]

Signals
May 20 2026fundingRaised $60M Series C led by Thrive Capital at $1B valuation[5]
Apr 28 2026newsAcquired Secure Annex to expand into browser extension, IDE, and AI tool security company claim, not independently confirmed[10]
Oct 23 2024launchExpanded platform to six language ecosystems (added Java and Ruby); blocking 100+ supply chain attacks per week[2]
Oct 22 2024fundingRaised $40M Series B (pre-emptive); 400% revenue growth in 2024; 7,500+ orgs protected[1]
Oct 22 2024hiringHiring push: 32 → 100 headcount target announced post-Series B, with focus on engineering, product, and sales[4]
Comps

Snyk · snyk.io · Socket CEO explicitly named Snyk as the direct competitor to displace; both sell open source dependency scanning to engineering and AppSec teams and compete for the same SCA budget line.[4]

Endor Labs · endorlabs.com · Named as a direct competitor in the enrichment data for socket.dev; same buyer (AppSec and engineering teams), same workflow (dependency scanning in CI/CD), same product category (SCA / supply chain security).[11]

Ox Security · ox.security · Named as a direct competitor in the enrichment data for socket.dev; overlaps on software supply chain security for engineering and AppSec teams.[11]

Stacklok · stacklok.com · Named as a direct competitor in the enrichment data for socket.dev; same workflow (evaluating open source package trustworthiness before or during dependency ingestion) and same developer-first buyer.[11]

Risk

The customer proof is company-sourced only. No independent source in this ledger confirms it.[10]

Next question

Ask for one referenceable production customer.

Not a recommendation. The first thing this ledger cannot answer.

Investor Lens
Why care
The case
What to learn next
Pay attention to
How it wins

Filled in the side panel for invited readers. This card carries sourced facts only.

Sourcestracings · 16

May 2026 · govinfosecurity.com

reported

May 2026 · finsmes.com

reported

May 2026 · linkedin.com

vendor

May 2026 · linkedin.com

vendor

May 2026 · linkedin.com

vendor

[11]Socket

May 2026 · socket.dev

company

May 2026 · globenewswire.com

company

May 2026 · linkedin.com

vendor

May 2026 · linkedin.com

vendor

May 2026 · linkedin.com

vendor

Socket

CALL NO.CS·SOCKET·26

Socket sells open source dependency security to engineering and AppSec teams, detecting and blocking malicious packages in real time rather than flagging known CVEs after the fact.

socket.dev · San Francisco

StageSeries C
Raised$125M
Headcountnot publicly disclosed
Valuationnot publicly disclosed
Founded2020
CompsSnyk +3

Ask for one referenceable production customer.

Not a recommendation. The first thing this ledger cannot answer.