AWS Security Hub Adds Socket for Supply Chain Security

AWS customers can now incorporate Socket, a supply chain security solution, through the AWS Security Hub Extended plan, which offers the first month free and allows usage to be covered by committed AWS spending. Socket is designed to detect malicious open source packages missed by signature-based tools through deep behavioral analysis across major ecosystems like npm, PyPI, Maven, Go, NuGet, and RubyGems. It enhances the Extended plan's lineup, which includes third-party security tools across 10 categories, by securing the open source supply chain critical to modern applications. Socket provides two products: Socket Firewall, which blocks malicious packages at install time, and Software Composition Analysis (SCA), which offers visibility into open source dependencies and flags risks. A novel usage-based pricing model for Socket Firewall is introduced, billing based on unique artifacts checked monthly rather than on bandwidth or seat counts, thus aligning costs with the size of a project's dependency footprint. AWS customers can easily subscribe to Socket through the Security Hub Extended plan, benefiting from consolidated billing and the flexibility to adjust usage as needed.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.