What does Socket sell?

Socket sells Socket Firewall, Socket for GitHub, Socket Reachability and Socket Dependency Search. Socket Firewall: Blocks malicious packages from being installed before they reach a developer's machine, CI or production. Socket for GitHub: Scans pull requests for risky dependency additions and malicious package updates before they merge. Socket Reachability: Filters vulnerability alerts down to those that are actually reachable from the application's code. Socket Dependency Search: Shows security insights for open source packages across major package registries.

How does CISO Tribune file Socket?

CISO Tribune files Socket under Software supply chain security, with Software composition analysis as a secondary category.

Company record · security vendor

Socket

Where Socket appears on the record (2)

Every page on CISO Tribune and its network that carries this company, 2 in all.

In the vendor directory (2): Software supply chain security companies: who they are and how CISOs compare them · primary category
Software composition analysis vendors · category

What the company sells

Socket sells software supply chain security tools that block malicious packages before they reach a company's code. It scans packages and updates across major registries such as npm, RubyGems and PyPI for malicious behavior, typosquatting and other supply chain risks, and flags or blocks risky dependency additions in GitHub pull requests. Socket has raised $125 million in funding to build out its platform for open source dependency protection.^[1]

Categories: Software supply chain security (primary category)
Software composition analysis
Compare Socket with companies in the same category
Headquarters: Not established from our sources
Founded: Not established from our sources
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: socket.dev

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Socket Firewall^[1]
Blocks malicious packages from being installed before they reach a developer's machine, CI or production.
Socket for GitHub^[1]
Scans pull requests for risky dependency additions and malicious package updates before they merge.
Socket Reachability^[1]
Filters vulnerability alerts down to those that are actually reachable from the application's code.
Socket Dependency Search
Shows security insights for open source packages across major package registries.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Socket's categories, then alphabetical. A list from the record, never a ranking.

On software supply chain security, Socket competes with Anchore, JFrog, RapidFort, Archipelo, Chainguard, Red Hat, Apiiro, Arnica, GitLab, OX Security and 11 more.
On software composition analysis, Socket competes with Snyk, Sonatype, Black Duck, Mend.io, Anchore, Apiiro, Arnica, GitLab, JFrog, OX Security and 9 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]socket.devSocket · socket.dev · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing

Last verified November 5, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 5, 2026 from the references above.

Work for Socket? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Socket. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Socket

What does Socket sell?: Socket sells Socket Firewall, Socket for GitHub, Socket Reachability and Socket Dependency Search. Socket Firewall: Blocks malicious packages from being installed before they reach a developer's machine, CI or production. Socket for GitHub: Scans pull requests for risky dependency additions and malicious package updates before they merge. Socket Reachability: Filters vulnerability alerts down to those that are actually reachable from the application's code. Socket Dependency Search: Shows security insights for open source packages across major package registries.
How does CISO Tribune file Socket?: CISO Tribune files Socket under Software supply chain security, with Software composition analysis as a secondary category.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.