Case Study: Webflow blocks malicious packages and reduces supply chain risk with Socket

Webflow clears all criticals and highs with Socket

Webflow, a visual development platform, faced challenges with supply chain security, including an inability to determine which vulnerabilities were truly exploitable and slow responses to new threats using their previous tool, Snyk. They needed a more holistic solution to block malicious packages and reduce alert noise for their engineering teams. This led them to adopt Socket's security platform.

Socket provided a comprehensive solution including Socket Firewall to proactively block malicious packages on developer machines and deterministic reachability analysis to prioritize critical vulnerabilities. The implementation was rolled out in phases to ensure a frictionless developer experience. As a result, Webflow consolidated their security tooling, significantly reduced critical and high-severity vulnerabilities in their main repository, and gained a faster response time to emerging threats through Socket's research and support.

Webflow