Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed. One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted. Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people. Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products: @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media. What we've shipped since the last round: • Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone. • Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable. • Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers. • Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex. When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it. Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before. We're hiring across engineering, sales, customer success, and threat intel. ❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.

We just bought a company. Why? Because vulnerability scanning is fundamentally broken. And I’m tired of pretending it’s fine. We acquired Coana, the best reachability analysis engine on the planet. The whole vuln industry is addicted to quantity over quality. More alerts, more dashboards. It’s security theater. And it doesn’t scale. Ask any developer what they do with 1,000 security alerts. They ignore them. Coana flips the script. It asks the only question that actually matters: Is this vulnerability even reachable by your code? If not, who cares? Move on. If yes, fix it fast. 💥 I’ve been obsessed with this idea for years. Why drown developers in noise when we can tell them what actually matters? When I first saw Coana, I knew: “We have to bring this into Socket. Nothing else even comes close.” Coana doesn’t just work — it’s freakishly good. ✅ 80%+ fewer false positives ✅ Instant results with first-of-its-kind "precomputed reachability" ✅ Full source code access is optional ✅ Can even run offline on air-gapped networks Yeah. It’s that good. I’m thrilled to welcome @ndrssndrgrd, @torp_martin, @amoellercsaudk, Benjamin, and the entire Coana team to Socket! These are world-class engineers. Real researchers. Together, we’re going to build security that actually scales — and actually helps you ship faster. Legacy tools collapsed under modern dependency trees. We’re not here to patch the current system. We’re here to replace it. This is how we move the industry forward. 🚀