Companies / socket.dev
socket.dev tech stack
socket.dev declares 23 subprocessors, including AI providers Amazon Bedrock, Anthropic, OpenAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| ActiveCampaign, LLC (Postmark) | Sending emails like password reset or login links |
| Amazon Bedrock | AI inference with other commercial models |
| Amazon S3 | storage of open source package data |
| Anthropic | AI models and inference |
| Backblaze | storage of open source package data |
| ClickHouse, Inc | organization alerts and analytics |
| Datadog, Inc. | used for system diagnostics |
| Functional Software, Inc (dba Sentry) | We use this for tracing and error logging |
| GCP | service infrastructure |
| HubSpot, Inc. | organizing customer information and sales communications |
| Linear Orbit, Inc. (Linear) | keeping track of customer issues and maintaining context while providing customer support |
| Mixpanel | for measuring analytics on socket's public websites |
| OpenAI | AI models and inference |
| Plausible | measuring traffic on Socket's public package pages |
| README | Documentation knowledge base |
| Sanity | Used as a CMS |
| Slack Technologies, LLC | Communication around customer support issues; We have a feature to send notifications to users via slack as an opt-in method |
| Stripe, LLC. | payment processing |
| posts social media messages about malware findings | |
| Vanta | Enabling customers to save alerts |
| WorkOS | to support SSO as a login method for socket.dev |
| Zenduty | paging support for incident response |
| n8n GmbH (DBA n8n) | Automation platform |
Seen on the website
Website This shows what the site runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
| Cloudflare | header: cf-ray: a5469ada0c099898-LAX |
| Google Workspace | mx: aspmx.l.google.com. |
| Next.js | script: /next-public-assets/_next/static/chunks/852d5be8-09220b66c0c346c5.js |
Certifications
| Standard | Status | What this means |
|---|---|---|
| SOC 2 | Company's own statement | SOC 2 has no public registry, so this cannot be verified from public data. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.