ecosystem / companies / socket
Socket logo

Socket

Socket is a San Francisco software supply chain security company that inspects open-source packages for backdoors, typo-squatting and other malicious behaviour before they reach a codebase. Founded by Feross Aboukhadijeh, it raised a $40M Series B in October 2024 and says it protects over 7,500 organisations. Toronto's Ahmad Nassri is its CTO.

CybersecuritySan Franciscosocket.dev
$40MSeries B announced 22 October 2024, led by Abstract Ventures with Elad Gil and Andreessen Horowitz, bringing total funding to $65MSocket, Series B announcement
7,500+organisations Socket says it protects, across 300,000 GitHub repositories, as of the October 2024 Series B announcementSocket, Series B announcement
100+ per weeksoftware supply chain attacks Socket says it detects and blocks, as of October 2024GlobeNewswire release, 2024-10-22

The people

FA
Feross AboukhadijehFounder & CEOprofile coming

What they build

Behavioural analysis of open-source dependencies across six languages
Pull-request checks that flag risky package changes before merge
AI-assisted threat detection for supply chain attacks
Software composition analysis as a replacement for legacy SCA tools

Open roles via the TechTO Job Board

Working at Socket

Browse open roles across the community on the TechTO Job Board — Canada’s most connected tech network. Socket’s roles show up here whenever they post.

Open roles on the TechTO Job Board ↗Or their own careers page: socket.dev/careers ↗

Jobs live on jobs.techto.org — the only structured source. We link to it rather than scraping career sites, so the board is always the source of truth.

About

Most dependency scanners tell you which of your packages have known vulnerabilities. Socket's argument is that the more dangerous case is a package that is behaving badly right now and has no CVE attached — a maintainer account taken over, an install script that phones home, a name one character away from something you meant to type. Socket analyses package behaviour rather than only its published vulnerability record, across six programming languages, and says it detects and blocks over 100 software supply chain attacks every week.

Feross Aboukhadijeh, a Stanford lecturer who wrote several widely-downloaded JavaScript packages, founded the company. In October 2024 it announced a $40 million Series B led by Abstract Ventures with Elad Gil and Andreessen Horowitz, bringing total funding to $65 million; the angel list included Bret Taylor, Phil Venables, Scott Johnston, Christina Cacioppo, Ann Mather and Tobias Lutke. It reports protecting more than 7,500 organisations and 300,000 GitHub repositories.

Ahmad Nassri is Socket's chief technology officer. He was CTO of npm through its 2020 acquisition by GitHub, VP of engineering at Kong and chief architect at TELUS Digital, and led engineering at Mashape when he spoke at TechTO in 2015.

Backers

Abstract Ventures led the $40M Series B in October 2024, with Elad Gil and Andreessen Horowitz and angels including Bret Taylor, Phil Venables, Scott Johnston, Christina Cacioppo, Ann Mather and Tobias Lutke. Total raised: $65M.

Quick answers

What does Socket do?

It secures the software supply chain by analysing how open-source packages behave — install scripts, network calls, obfuscated code — rather than only checking them against known vulnerability lists, and blocking the bad ones before they land in a codebase.

Who founded Socket and how much has it raised?

Feross Aboukhadijeh, a Stanford lecturer and open-source maintainer. It has raised $65 million in total, including a $40 million Series B in October 2024 led by Abstract Ventures.

Did Socket take the TechTO stage?

No. Ahmad Nassri, Socket's CTO, spoke at TechTO in 2015 — but he was leading engineering at Mashape then, the API marketplace that became Kong.

Suggest an edit
Work here? Claim this page
Know someone who belongs here? Suggest a profile
Maintained by TechTO · facts sourced and dated · last reviewed Sep 3, 2026