Gecko Security

Gecko Security is a web-based AI security scanning (SAST) platform for engineering, DevOps, and security teams that analyzes code, logic, and infrastructure to surface exploitable vulnerabilities and provide developer-ready fixes.

Key capabilities include:

• Attack-path and business logic detection, mapping multi-step vulnerabilities and cross-service risks across microservices and multiple repositories
• CI/CD and PR/MR reviews, including a PR/MR bot (GitHub-supported) so teams can triage and resolve issues inside existing workflows
• One-click autofix and AI prioritization, designed to reduce false positives and focus attention on remotely exploitable findings
• Policy and workflow tooling, including natural-language rules, team management, custom rules, APIs, and integrations such as Jira, Linear, and Slack

Pricing: Free ($0, 5 repo scans), Pro ($100/month, 100 scans), Enterprise (custom, annual billing, unlimited scanning).

Notable for going beyond pattern-matching scanners by building a deeper understanding of applications to identify multi-step attack chains and business logic flaws, plus offering SOC 2 compliance and enterprise deployment options (on-prem, self-hosted, private cloud, SSO/SAML with SCIM).