Socket
Connect Socket to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Socket to collect vulnerability scanning evidence with automated compliance tests, switched on per workspace.
| Category | Vulnerability Scanning |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Socket's guide | docs.socket.dev |
Connect with an API token
-
In Socket:
- On the Socket dashboard, go to Settings in the left-hand menu.
- Click the API Tokens tab.
- Click + Create API token in the upper-right corner.
- In the dialog, set a name and choose only the scope alerts:list (List all alerts).
- Click Confirm to generate the token, and copy it.
Where to find the other values:
- Organization (optional): Your Socket organization slug; the token is created inside the organization you are viewing in the dashboard (the API's organizations endpoint lists the organizations associated with the token).
Source: docs.socket.dev, docs.socket.dev, checked 2026-10-07.
The permissions Safeguard needs:
alerts:list. -
On Compliance › Connectors, open Socket, click Connect, choose API token and fill in:
Field What to enter API token Required. Stored encrypted and never shown again. Organization (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Socket and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC7.1 | 3 |
| ISO/IEC 27001 | Automated tests | A.8.8 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(1) | 3 |
| PCI DSS | Automated tests | 6.3.3, 11.3.1 | 3 |
| NIST CSF 2.0 | Automated tests | ID.RA-01, ID.RA-06 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- Vulnerability Scanning connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks