Socket

Socket, founded in 2021, builds a developer-first security platform designed to protect organisations from software supply chain attacks. The company's central premise is that conventional security tooling disrupts developer workflows and reacts to threats only after they surface; its own approach is to detect and block malicious open source packages in real time and without slowing development. Socket cites the figure that more than 90% of modern codebases originate from open source, and reports detecting over 100 zero-day attacks every week.

The product works by inspecting the actual behaviour of dependencies. Through what the company calls deep package inspection, it analyses open source packages for malware, typo-squatting, hidden code and permission creep before such threats reach production. The technical work spans software supply chain security, open source dependency analysis, behavioural analysis of dependencies, malware detection and developer security tooling, and touches applications in the technology, media, healthcare and finance sectors.

Roles at Socket are likely to sit close to the intersection of security research, static and dynamic analysis, and developer tooling, with an emphasis on proactive rather than reactive security. The company describes its culture as developer-first and oriented towards securing applications without disrupting the workflows that build them.