Charlie Duong

cofounder @tryopine ex @jupiterone

[Feross @feross]

Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M.

Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed.

One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted.

Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people.

Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products: @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media.

What we've shipped since the last round:

• Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone.

• Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable.

• Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers.

• Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex.

When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it.

Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before.

We're hiring across engineering, sales, customer success, and threat intel.

❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.

[Charlie Duong @_ctdio]

@benln I'd love one. What the criteria for early tab power user?

[Charlie Duong @_ctdio]

welp, that's a first

[Charlie Duong @_ctdio]

holy shit @useblacksmith is amazing

[Charlie Duong @_ctdio]

@n2parko @cursor_ai Small quality of life one: ctrl+p/ctrl+n to cycle through files and slash commands. I love that this is one of the few agent clis that supports a vim mode but was surprised to see this keybind missing.

[Charlie Duong @_ctdio]

Just ralph wiggy that shit

[Charlie Duong @_ctdio]

Been using cursor bugbot for a while and it's been amazing at spotting real bugs.

Paired with claude code in a ralph wiggum loop, it's been great for touching up draft PRs before adding reviewers.

[Charlie Duong @_ctdio]

Cursor's UI feels like it could potentially a great hub to do more concurrently.

Something that has me coming back to the terminal frequently is how easy it is to just pop into a worktree or different project, kick off work (perhaps a few agents concurrently), then go to another dir to kick off more for a different task, review work or pop into the code to do a few edits or exploration myself if needed.

I know I can do this with multiple instances of cursor or have the agent run in a worktree, but it starts to get unwieldy and resource intensive with 5 instances of lsp running. Background agents are great, but some tasks require a bit more hands on guidance or verification.

Perhaps a way of quickly switching contexts/projects while maintaining a central view of ongoing a work so I can keep track of ongoing work and hop around easily when needed.

[Charlie Duong @_ctdio]

man I love how easy it is to build your own tools now

[Charlie Duong @_ctdio]

Curious where I’d be at if I didn’t switch to Claude Code for most of my work

[Charlie Duong @_ctdio]

Not bad

[Charlie Duong @_ctdio]

Okay, @cursor_ai 2.0 is fire!

Composer 1, the improvements to agent interface, the review agent... It all works together beautifully. Loving the feedback loop!

[Charlie Duong @_ctdio]

woah, this is neat. Plan mode in claude code now prompts for feedback

[Charlie Duong @_ctdio]

Just got back from Japan, I miss it already. Here are a few pics from our visit to Sapporo

[Charlie Duong @_ctdio]

I didn't wake up today expecting to watch the world tram driver championship but here I am

[Charlie Duong @_ctdio]

@ninepixelgrid Damn. I love this

[Charlie Duong @_ctdio]

Still getting great value out of Claude Code. I keep seeing a bunch of people talk about switching to Codex, may need to give it a shot. I've definitely found gpt-5 great for tricker problems, but Opus 4.1 strikes nice balance of quality and speed for me.

[Charlie Duong @_ctdio]

Jupyter notebooks in @cursor_ai feel pretty great. Been spending a good bit of time in them this past week and it's gonna be hard using them anywhere else now.

Should have tried them in cursor a long time ago, but it's timely that 1.5 came with some nice improvements.