# Socket: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 13 judge labels across 1 category by 8 of 14 models. Page: https://www.gane.ai/index/it/vendors/socket

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 11 | 0% | 13 |

## What the models said for it

- "Developer-Centric SCA: *Snyk, Socket* (Best for high developer adoption, auto-remediation, and supply-chain risk)." (Gemini 3.5 Flash, SCA)
- "If your primary concern is detecting malicious packages, Socket offers excellent value at $20/developer/month" (MiniMax M2.5, SCA)
- "Look for next-gen SCA tools (e.g., Socket, Endor Labs, or Phylum) that complement traditional CVE scanning" (Gemini 3.5 Flash, SCA)
- "Other top contenders include FOSSA, Safeguard SCA, Socket, Semgrep Supply Chain, and Endor Labs." (Llama 4 Maverick, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 3 | 0 | 0 | 3 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 2 | 0 | 2 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 2 | 0 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 1 | 1 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named Socket, from 36 of the 41 answers that named it (only the models that return a source list).

### Domains cited

- dupple.com: 24
- res.cloudinary.com: 15
- blog.jetbrains.com: 13
- g2.com: 13
- linuxfoundation.org: 13
- upwind.io: 13
- itechguides.com: 12
- checkmarx.com: 10
- raven.io: 10
- safeguard.sh: 9

### Pages cited

- https://dupple.com/learn/best-software-composition-analysis-tools: 24
- https://res.cloudinary.com/snyk/image/upload/v1731508416/website-pdfs/The-Forrester-Wave-Software-Composition-Analysis-Software-Q4-2024.pdf: 15
- https://blog.jetbrains.com/qodana/2025/09/best-software-composition-analysis-tools: 13
- https://linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 13
- https://itechguides.com/best/software-composition-analysis-software: 12
- https://upwind.io/glossary/10-best-software-composition-analysis-tools-for-sca: 12
- https://raven.io/blog/best-software-composition-analysis-tools: 10
- https://g2.com/categories/software-composition-analysis: 9

## In its own words

What Socket's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Block zero-day supply chain attacks (https://socket.dev/)
- For: engineering and security teams (https://socket.dev/)
- Certifications: SOC 2 Type II
- Customers named: Anthropic, Vercel, MetaMask, Drata, Replit, UiPath, Netflix

## What it publishes

Every page socket.dev exposes, read 2026-09-29: 494 addresses. By kind, pages and the last 90 days:

- blog: 199 pages, 60 in the last 90 days, latest 2026-09-25
- case study: 18 pages, 0 in the last 90 days, latest undated
- comparison: 6 pages, 0 in the last 90 days, latest 2026-03-25
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated
- podcast or video: 3 pages, 0 in the last 90 days, latest 2026-06-30
- Recent: 2026-09-25 blog: Openjs nodejs security https://socket.dev/blog/openjs-nodejs-security
- Recent: 2026-09-24 blog: Mini shai hulud actions https://socket.dev/blog/mini-shai-hulud-actions
- Recent: 2026-09-23 blog: Firefox google account takeover https://socket.dev/blog/firefox-google-account-takeover
- Recent: 2026-09-23 blog: Memtensor compromise https://socket.dev/blog/memtensor-compromise
- Recent: 2026-09-22 blog: Oj vite rust https://socket.dev/blog/oj-vite-rust
- Recent: 2026-09-18 blog: Happy birthday shai hulud https://socket.dev/blog/happy-birthday-shai-hulud

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.