What Socket is
Socket has great malware detection capabilities as part of their SCA solution, alongside function reachability from their acquisition of Coana. They have especially robust support within the JavaScript ecosystem. The vendor site is socket.dev. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Socket covers
Socket is in the catalog for these capabilities. Categories: Endpoint Management and SCA. Catalog tags: Hands-on, Best for MidMarket, and Hot Right Now.
How to evaluate Socket in a security program
Use Socket as a stack candidate, not as diligence evidence. The oneNorma score for Socket is 6/10 (percentile 83). If the real gap is in Endpoint Management and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what socket.dev publishes. Contrast it with pentesting and Security Cloud & Compliance.