Detects compromised packages via behavioral analysis (network calls, install scripts) rather than just CVE matching
Socket is listed under Security & IT Operations, in the Industry-Specific Tools category on Flocci AI Tools. Detects compromised packages via behavioral analysis (network calls, install scripts) rather than just CVE matching. It is freemium — a usable free tier with paid plans above it, and it lives at socket.dev.
Socket is freemium: there is a free tier you can work in and paid plans above it. It is one of 391 freemium tools in the catalog, all labelled the same way so you are never surprised by a paywall.
Socket does 3 things the catalog singles out: Detects compromised packages via behavioral analysis (network calls, install scripts) rather than just cve matching; always free for open-source projects, unlimited devs/repos on a monthly scan cap; blocks malicious dependencies automatically at install time.
Aikido Security is the closest free alternative: it sits in the same Security & IT Operations sub-category and is free tier + paid plans. Snyk also start free. The full list is on the alternatives page.
See the full list →