Security that actually understands your codebase, @ycombinator (F24)
/dev/null
Joined April 2024
- Tweets37
- Following152
- Followers500
- Likes565
The Gecko team just wrapped up Black Hat SecTor 2026! Two days at the booth in Toronto, plus:
• Artemiy Malyshau (@nkoorty) gave a talk on how better product and agent UX gets security issues fixed
• Gecko pitched in the Startup Spotlight competition as a finalist
• Plenty of good conversations, familiar faces and new ones our booth
Thanks to everyone who stopped by, joined the talk, or came to watch the pitches. See you next year, Toronto! 🇨🇦
That's a wrap on Black Hat 2026 🦎
Three days of live demos at the booth, a business hall talk from @jjjutla on eliminating vulnerability classes at scale, and a helicopter night over the strip!
Thanks to everyone who came to talk AppSec. See you next year, Vegas!
“There’s no codebase you can point to which isn’t vulnerable.”
Finding vulns is cheap now. No team can out-triage the backlog, so cal.com moved security into the pipeline. All PRs get checked before review.
Glad to be part of this with @calcom CEO @pumfleet and @mattjay
Got to interview @calcom's CEO @pumfleet about why they decided to go closed source due to the perceived security risk of "giving AI the blueprint to the vault."
Great convo how a small team is thinking about security in the age/speed of AI.
youtube.com/watch?v=OJIsyQtd…
The Gecko team is at Black Hat USA!
Our team is at booth #5713 meeting new and familiar faces, booking demos, and handing out our limited edition Black Hat challenge coins!
Gecko is coming to #RSAC2026 🦎
Here’s how to find us:
→ Meet the team at Booth #39 in the Early Stage Expo
→ See live demos of the Gecko platform in action
→ Book a 1:1 with our founders to talk about scaling AppSec and where it’s heading
The Gecko team is at #BlackHatEurope in London!
Excited to continue great conversations from yesterday tackling SAST and AppSec challenges.
If you’re in London, stop by booth #722 to see how Gecko finds and fixes business logic vulnerabilities at scale.
Gecko Security retweeted
We want to address attribution oversights in several of our CVE disclosures and properly credit the original researchers for those findings.
Earlier this year, we used our AI SAST tool to scan GitHub and find vulnerabilities in open-source repositories. For all findings by Gecko, we worked directly with the maintainers to develop and release fixes. We've since learned that some of our findings had already been discovered first by other researchers on separate bug bounty platforms with one already having a CVE assigned, but no public fix released. At the time of our disclosures, neither we nor the maintainers were aware of any prior reports. We scanned the latest versions of code and only checked GitHub and CNA advisories, not different bounty platforms, which was an oversight on our part.
Gecko Security retweeted
Gecko’s (@gecko_sec) AI SAST scanner found 30+ zero-day vulnerabilities in major open source projects that no AppSec tool found.
Here’s how they did it: gecko.security/blog/gecko-30…
quick recap before christmas of what we shipped:
- js/ts/java support for our ai pentester
- github bot that scans your branch at every pr
- teams feature for companies that want to share scans/vulns
- scan any repo using the github public url
- code fixes for each vulnerabilities (if applicable)
- closed seed round
what have you shipped, anon? 🦎
Gecko Security retweeted
Every piece of software is so absolutely full of bugs I cannot wait for an integrated Blackbox AI tester agent that works with an automatic P2 bug fixer agent to just fix all the most annoying tedious little bugs that PMs will mark as “won’t fix”
The people who do that should win a Nobel Prize for Software
Gecko Security retweeted
This demo is pretty interesting — they find 0 day intrusions. There's a whole world in which they should go find the 0 days that LLMs can find *before* the other LLMs do so
Try out Gecko here: app.gecko.security/
We've also just launched Gecko on Product Hunt, we'd love your support and feedback: producthunt.com/posts/gecko-…
Gecko Security retweeted
300mg caffeine mornings =
🚀 @gecko_sec launched! Your AI Security Engineer
"Gecko finds and fixes security vulnerabilities in your codebase, just like having a security engineer securing your code."
🌐 gecko.security
🎯 Zero False Positives: Vulnerabilities are verified and explained. No noise, only actual risk.
🕵️♂️ Critical Vulnerabilities: Gecko uses static analysis, fuzzing, and symbolic execution to locate bugs.
🔧 Automatic Vulnerability Fixing: No more wasting engineering time and cost on patching vulnerabilities.
💰 Cost Efficient Scalability: Gecko simplifies your security posture. No more juggling multiple solutions.
🤝 Do you have code that needs to be secured? Email the founders here or book a demo here: cal.com/geckosec/15min
💡 Check out their research on Github!: github.com/Gecko-Security
Congrats @jjjutla & @nkoorty!!
fondo.info/3AuBpP3
Gecko Security retweeted
YC F24's @gecko_sec is an AI security engineer that finds and fixes vulnerabilities in your codebase, helping teams secure code without relying on one-time human pentests that quickly become outdated.
ycombinator.com/launches/M40…
Congrats on the launch, @jjjutla and @nkoorty!
Super excited to work with Pete - he’s already helped us immensely! 🦎
Congrats to @jjjutla and @nkoorty on launching Gecko Security! Gecko uses AI to replace one-off manual security audits with continuous vulnerability detection. These two are the perfect team to solve this problem; they've already racked up impressive accomplishments in security and AI research and just happen to be great full stack builders. Excited to be working with them!