Gecko Security

Your AI Security Engineer

138 followers

Your AI Security Engineer

138 followers

Visit website

Testing and QA software

•

Security software

Gecko is an AI that finds and fixes security vulnerabilities in your code by testing it like a hacker. It's found several 0-day’s in open-source projects and helps you reduce 80% of the engineering effort required to fix bugs and meet compliance.

Free

Launch tags:Developer Tools•Artificial Intelligence•Security

Launch Team

Dropbox SignSimple, secure eSignatures for the way your team works.

Promoted

Gecko Security

Maker

📌

👋🏼Hi Product Hunt makers! I’m JJ, the Co-Founder of Gecko—an AI security engineer to find and fix vulnerabilities in your code. Today, we’re officially launching the Gecko platform, and we’re excited to share what we have built. Most of the developers we spoke to told us that they think of security as an afterthought, added out of fear rather than part of the development process at the start. This is because current security tools can’t find critical business logic vulnerabilities, which are the ones attackers actually exploit, and instead flag low-priority issues with many false positives. This makes fixing these issues slow and costly, pulling engineers away from building features that grow revenue. We built Gecko for teams that want to build secure code quickly without wasting time on tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated. Gecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to keep your code secure. At a high level, Gecko mimics the approach of skilled security experts by using LLM agents combined with program analysis tools like static analyzers, fuzzers, and symbolic executors, previously only used in Intelligence agencies. For fixing vulnerabilities, Gecko uses multiple agents to iteratively refine the patches - ensuring the vulnerability is remediated and your code isn’t broken. We have released our free version which is limited to SAST and only supports Python and Javascript as we continue to optimise edge cases in the other languages. Gecko is still in its early stages and we are improving it everyday. We have used Gecko to find several 0-day vulnerabilities open source projects that previously only human security engineers could find. If you want to join the journey with us, join our Discord and share your feedback! https://discord.gg/8MMHngbEaM

Report

2yr ago

Lingo.dev

Loving it. I saw the demo, and this is the coolest software I’ve seen lately. Congrats on the launch, guys! 🔥

Report

2yr ago

Gecko Security

Maker

@maxprilutskiy Thanks!

Report

2yr ago

This is awesome, have really needed something like this for quite a few projects! Can't wait to try it out even more.

Report

2yr ago

Absolutely amazing... Gecko was a lifesaver when it came to security. Had no idea where to start and the founders really went the extra mile for me :)

Report

2yr ago

Rayna UI - Free 500+ Components & UI kit

Finally, security that gets how devs actually work! Been putting off pen testing our new feature because... well, who has time? Quick q - how deep does it go with third-party integrations? Got some OAuth flows that keep me up at night

Report

2yr ago

Gecko Security

Maker

@thealisoneyo Thanks! That’s exactly what we specialise in! Our AI is great at identifying multi-step exploits, especially those involving logical issues. Once it understands your code’s expected behaviour, it creates a detailed call graph that maps the functions and integrations. This allows us to track how user input flows through your logic and uncover improperly implemented authentication or access controls. Let me know if you’d like a demo!

Report

2yr ago