Email content

socket-launch-week-recap-header

The last few months have been a big step up for Socket. More engineering and security teams are relying on us every day, and the volume of supply chain attacks has increased sharply. We’re scaling to meet the moment by making Socket faster, easier to use, and more deeply connected to the workflows teams already depend on.

Here’s what we shipped during Socket Launch Week, across triage, automation, access control, AI workflows, and Socket Firewall:

linear-integration

Socket for Linear Is Now Available

Create and manage Linear issues directly from Socket alerts. Teams can manually create issues from alerts, automate ticketing with rules, route findings by severity or category, and keep alert status synced between Socket and Linear.

CleanShot 2026-06-25 at 02.45.09@2x

Introducing Manifest Alerts

Socket now detects missing lockfiles in application repositories, helping teams identify projects where dependency trees are not pinned. Manifest Alerts surface risks in project setup, making it easier to spot where installs may drift over time.

CleanShot 2026-06-25 at 02.47.53@2x

Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions

Socket Firewall now extends install-time protection to editor extensions. Teams can block malicious or risky VS Code Marketplace and Open VSX extensions before they reach developer environments, closing off another path attackers have used in recent major supply chain attacks.

CleanShot 2026-06-25 at 02.49.55@2x

Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection

Socket MCP now gives AI assistants authenticated access to live Socket data for deeper supply chain investigations. Teams can query organization alerts, review threat feed entries, and inspect package files directly from their AI coding tools.

CleanShot 2026-06-25 at 02.51.57@2x

Introducing Repository Access Permissions and Custom Roles

Socket now supports more granular access control with Custom Roles and Repository Access Permissions. Admins can define what actions a user can take, scope access to specific repositories, and apply least-privilege controls across teams, contractors, auditors, and security workflows.

Thanks for being part of what we’re building at Socket. More soon.