Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M.
Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed.
One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted.
Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people.
Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products: @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media.
What we've shipped since the last round:
• Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone.
• Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable.
• Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers.
• Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex.
When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it.
Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before.
We're hiring across engineering, sales, customer success, and threat intel.
❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.
I wrote a blog post about how to sign data. I think even in 2026 we still need better tooling. Check it out: blog.foks.pub/posts/domain-s…
I blogged on using FOKS to store, sync and manage API keys for your AI agents: blog.foks.pub/posts/ai-agent…
Max Krohn retweeted
#IDontWantToOverreactBUT
Hello, America! Paga has officially landed 🇺🇸
We're unlocking a new era of financial freedom for the African Diaspora, beginning with the Nigerian community.
#TwoWorldsOneWallet #PagainUS #JustPagait #Fintech #GoodMonday #VictoryMonday
FOKS v0.1.2 is out! New features include Bot Tokens and a REST-based interface to the KV store. Follow @foksproj for future updates. See github.com/foks-proj/go-foks… for release info.
Max Krohn retweeted
FOKS by @maxtaco "is like Keybase, but fully open-source and federated, with SSO and YubiKey support":
blog.foks.pub/posts/introduc…
I've been working on a new system called FOKS -- the federated open key service. There's a blog post that got picked up on hacker news discussing the launch: news.ycombinator.com/item?id…
Max Krohn retweeted
🚀 Big news! @SocketSecurity just raised a $40M Series B round to combat next-gen software supply chain security attacks and defend open source.
The round was led by @AbstractVC, with @eladgil, @a16z, and top angels.
We have big plans for the $$$ – see thread ⬇️
🧵 1/10
Today is the 10 year anniversary of the first Keybase merkle root. Still chugging along. keybase.io/_/api/1.0/merkle/…
On the one hand, she is an absolute badass in that she can play the horn without a mouthpiece. On the other, I think she’s overly concerned about falling debris.
Max Krohn retweeted
🚀 Huge news! @SocketSecurity has raised $20M Series A funding led by Andreessen Horowitz (@a16z).
⭐️ This funding fuels our mission to make open source safer for everyone!
🚀🚀🚀 We're also announcing 4 new products this week as part of Socket Launch Week! ✨
🧵 1/10
Max Krohn retweeted
✨ HUGE NEWS! ✨
🤖 Introducing Socket AI – ChatGPT-Powered Threat Analysis
@SocketSecurity is using ChatGPT to examine every npm and PyPI package for security issues!
🤯 In just 2 days, we confirmed 227 vulnerable and malware packages, all discovered with the help of ChatGPT
Max Krohn retweeted
Today I'd like to share a free little game I made. I know it's 2023, but it requires a real keyboard (or gamepads), so no phones. It's for 1 or 2 players sitting at the same browser. Introducing Tippy Coco. tippycoco.com
Max Krohn retweeted
In our commitment to remaining transparent and open as we build our end-to-end encryption offering, we have published our cryptographic design for peer review on @GitHub [Blog Post] blog.zoom.us/wordpress/2020/…
Max Krohn retweeted
Congrats @maxtaco @malgorithms ! Zoom picked a great company for its first acquisition. Huge for NYC and everyone working from home. cnbc.com/2020/05/07/zoom-buy…
This Keybase issue: github.com/keybase/keybase-i…
Max Krohn retweeted
It’s an unusual time to celebrate anything, but we’re unveiling a new project today, and I want my team to know I’m so proud of them. Please check out Keybase Book, our latest project. book.keybase.io/











