Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M. Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed. One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted. Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people. Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products: @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media. What we've shipped since the last round: • Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone. • Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable. • Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers. • Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex. When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it. Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before. We're hiring across engineering, sales, customer success, and threat intel. ❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.

welp, that's a first

holy shit @useblacksmith is amazing

Just ralph wiggy that shit

Been using cursor bugbot for a while and it's been amazing at spotting real bugs. Paired with claude code in a ralph wiggum loop, it's been great for touching up draft PRs before adding reviewers.

man I love how easy it is to build your own tools now

Okay, @cursor_ai 2.0 is fire! Composer 1, the improvements to agent interface, the review agent... It all works together beautifully. Loving the feedback loop!

woah, this is neat. Plan mode in claude code now prompts for feedback

Just got back from Japan, I miss it already. Here are a few pics from our visit to Sapporo

I didn't wake up today expecting to watch the world tram driver championship but here I am

Still getting great value out of Claude Code. I keep seeing a bunch of people talk about switching to Codex, may need to give it a shot. I've definitely found gpt-5 great for tricker problems, but Opus 4.1 strikes nice balance of quality and speed for me.

Jupyter notebooks in @cursor_ai feel pretty great. Been spending a good bit of time in them this past week and it's gonna be hard using them anywhere else now. Should have tried them in cursor a long time ago, but it's timely that 1.5 came with some nice improvements.

rules, boxes, and the big game most people think the boxes around them are permanent, but they're just constructs. rules exist everywhere and yes, you need to learn them first — but most are just little games pretending to be the big game. if you're just starting out, you're going to feel like everyone else knows some secret rulebook you don't have. they don't. they're just playing by someone else's rules and calling it wisdom. the little games? metrics obsession, design system orthodoxy, bureaucracy trying to feel important. the big game is more about creating meaning, beauty, and helping humans flourish. you get to choose which one you play. i've watched teams spend weeks chasing a 2% conversion bump while their users are literally screaming that the product sucks. i've seen designers torture themselves making 12px work when 10px feels perfect, all because the style guide said so. i’ve seen endless ideas die just because they don’t match some conventional wisdom. but here's the thing — the best work comes from trusting yourself. every breakthrough i've seen happened when someone said "this feels wrong" and had the courage to try something different. they know when to bend the rules and jump out of it. learn the rules first, understand why they exist. then trust your gut and break them when they don't serve you. eventually you'll be making new rules that others follow. it's like learning music or color theory so you can break it beautifully — the rules teach you the language, but your instincts know the poetry. your uncertainty isn't weakness, it's potential. when you can tell the difference between little games and the big game, you're free to create something that actually matters. don't get stuck in boxes someone else built for their problems.