Product
Socket
by Socket
- Product website
- https://socket.dev
- Documentation
- https://docs.socket.dev
- Pricing
- https://socket.dev/pricing
- Status page
- https://status.socket.dev/
- Categories
- Application Security Platform
Description
Supply chain security platform that proactively detects and blocks malicious packages, typosquatting, and zero-day supply chain attacks across npm, PyPI, Maven, and other package registries.
AI-native score
How ready this product is for agents to use, on a 0–100 scale across four weighted dimensions. Security is one of them, so a high score is not a substitute for your own security or vendor-risk review. How is this scored?
Unrated. Only 12% of the scored decision fields are researched, so the grade is held until more are confirmed. The breakdown below shows what's been scored.
| Component | Raw | Weight | Contribution |
|---|---|---|---|
| Integration | 1/10 | 35% | 3.5 |
| Trust | 0/6 | 30% | 0.0 |
| Portability | 0/4 | 20% | 0.0 |
| Security | 1/4 | 15% | 3.8 |
Signals that fired
- Integration: Verified llms.txt (+1)
- Security: Compliance certifications (+1)
Signals not researched
These gaps cover the fields used in the AI-native score.
- Integration surfaces: WebMCP, Headless signup, MCP servers, Agent2Agent (A2A) servers, Native connectors, API specs, Command-line interfaces, Agent skills, Developer kits
- Trust & data policy: Trust center, Multi-factor authentication, Zero data retention, No generative AI training, Hard budget caps, Sandbox environment, Data export, Data import, Open standards, Standard protocol access, No proprietary-SDK lock-in, Documented provider swap, Self-hostable
- Security & compliance: Access controls
Trust & data policy
- Open source
- No
Not yet researched Trust center, Multi-factor authentication, Zero data retention, No generative AI training, Hard budget caps, Sandbox environment, Data export, Data import, Open standards, Standard protocol access, No proprietary-SDK lock-in, Documented provider swap, Self-hostable
Security & compliance
Certifications and access controls this product reports on its own pages. We confirm the vendor lists each one; for certifications we don't audit the underlying report. Part of the 15% security score.
A shared trust or security page can support several certifications. We do not require separate public report links because reports may require login, vendor approval, or a nondisclosure agreement. Ask the vendor for reports and applicable coverage before a procurement decision. These listings expose no per-claim check date; the entry's updated date does not date the supporting evidence.
Compliance certifications
Not yet researched Access controls
Integration surfaces
How an agent connects to this product and finds its documentation. The largest dimension of the AI-native score (35%).
- llms.txt
- https://docs.socket.dev/llms.txt
Not yet researched WebMCP, Headless signup, MCP servers, Agent2Agent (A2A) servers, Native connectors, API specs, Command-line interfaces, Agent skills, Developer kits
Offers
No offers recorded.
Reviews
No approved reviews yet.
Catalog activity
Track how this entry changes as proposals are opened and merged.
Related products
Products from other publishers that share a job-to-be-done or category, most-shared first.
-
Application Security Platform
Own this product? Add a directory badge to your site
Link your site back to this Open Agent Guide listing. The badge makes no grade claim while this product is unrated, and updates on its own once enough is verified to assign a grade.
The badge shows only that this product is listed; it makes no grade claim and can’t be self-set. How scoring works
Ready to decide?
Unrated · 12% researched. Grade withheld until more fields are verified.