Socket lands a fresh $40M to scan software for security flaws

TechCrunch reports that Socket, a startup focused on identifying malicious behavior and risky changes in open-source dependencies, raised a $40M Series B to scale its software supply chain security platform, which integrates AI to summarize vulnerabilities and reduce false positives; the article highlights growing supply chain risk, Socket’s claimed detection of frequent zero-day supply chain attacks, notable customers (e.g., Anthropic, Figma, a major U.S. bank), rapid revenue growth, and a competitive landscape including Oligo, Endor, and Chainguard.