Socket

Socket is ranked #4 of 54 in software composition analysis software on The Geeks Club. It runs on API, Browser extension, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. Paid plans start at $25/mo.

Socket plans and pricing

All plans

Team $25/mo per developer; minimum 5 developers; yearly plan saves 20% 5,000 scans/month · 2,500 API quota/hour · unlimited members · 3 repository labels · precomputed reachability socket.dev · 1 Oct 2026

Business $50/mo per developer; minimum 20 developers; yearly plan saves 20% 10,000 API quota/hour · unlimited members · unlimited repository labels · compliance integrations · SBOM import/export · SSO/SAML · webhook automation socket.dev · 1 Oct 2026

Free Not published per developer Unlimited developers & repos · 1,000 scans/month · 500 API quota/hour · 3 members · 1 repository label socket.dev · 1 Oct 2026

Enterprise Not published Full application function-level reachability · GitLab/Bitbucket/Azure DevOps/self-hosted integrations · SCIM · audit logs · IP restrictions · named account manager socket.dev · 1 Oct 2026

Compared on software composition analysis software

Free plan: Yes
Paid from: 25 /mo

Best Socket alternatives

See all 12

9.3 FOSSA Free plan

9.3 Xygeni Free plan

9.0 Snyk Open Source Free plan

8.7 Semgrep Supply Chain Free plan

8.6 Endor Labs Free plan

7.8 DepWarden Free plan

Socket

What it does: Socket is a developer-first security platform that protects code from vulnerable and malicious dependencies.
Threat prevention: Socket detects and blocks malicious packages before they reach a developer machine, CI, or production.
GitHub workflow: The Socket GitHub App scans dependency changes in pull requests and provides feedback before merging.
Firewall: Socket Firewall intercepts package-manager requests and blocks malicious direct or transitive dependencies before installation.
Firewall ecosystems: Socket Firewall Free supports JavaScript and TypeScript package managers, Python pip and uv, and Rust cargo.
Reachability: Socket reachability analysis can eliminate up to 90% of irrelevant CVEs through full application analysis.
Integrations: Socket lists integrations including AWS CodePipeline, Azure Pipelines, Bitbucket Pipelines, CircleCI, Jenkins, Vanta, and Drata.
CLI: Socket CLI is installed with npm and requires Node.js 18.20.8 or newer.
API: Socket provides a REST API and a JavaScript SDK for customized integrations and automation.
Data handling: Socket says it never uploads source code and collects dependency manifests and lockfiles for analysis.
Encryption: Socket states that communications with its servers use TLS and that manifest files are protected in transit with HTTPS.
Compliance: Socket's pricing feature matrix lists SOC 2 Type II compliance.
Open-source pricing: Socket says it is and will always be free to use for open-source projects.
Founded: 2021
Price from: $25/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#4 of 54
Best Dependency Management Software in 2026#9 of 21

Is Socket yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Socket

Sources

socket.dev· checked 1 Oct 2026
docs.socket.dev/docs/getting-started· checked 1 Oct 2026
docs.socket.dev/docs/socket-firewall-overview· checked 1 Oct 2026
docs.socket.dev/docs/reachability-analysis· checked 1 Oct 2026
socket.dev/integrations· checked 1 Oct 2026
docs.socket.dev/docs/socket-cli· checked 1 Oct 2026
socket.dev/security· checked 1 Oct 2026
socket.dev/pricing· checked 1 Oct 2026