Socket has raised $60M in a Series C led by Thrive Capital, reaching a $1B valuation and unicorn status.

The startup scans open-source packages in real time for malicious behaviour: backdoors, typosquatting and obfuscated code, before they reach production.

The raise reflects growing enterprise anxiety over AI-accelerated software development and the flood of unvetted open-source dependencies it brings.

The startup that spotted a malicious Axios dependency in six minutes has just crossed unicorn territory and its timing could hardly be better.

Socket has raised $60 million in a Series C round led by Thrive Capital, pushing the San Francisco-based company to a $1 billion valuation. Andreessen Horowitz and Abstract Ventures, both existing backers, participated alongside new investor Capital One Ventures, bringing Socket’s total funding to $125 million.