We believe security helps a company keep its velocity, when the vulnerabilities that used to compound quietly are being eliminated at the root instead.
Meet some of the key people behind Gecko
Co-Founder & CEO
JJ joined GCHQ as a teenager, working on security research and exploit development, and scored the highest mark on its reverse engineering and binary exploitation aptitude test ever recorded. The record still stands. He went on to lead security tool development for Binance’s eight-person red team and led the recovery of $500K stolen by North Korean state hackers, the largest recovery of stolen funds at the time.
Co-Founder & CTO
Artemiy served in an elite unit of the Austrian Cyber Forces, defending national infrastructure. He was then the first employee at a government-backed cybersecurity research group, where he led security projects for Interpol and national governments. At Gecko he builds the platform trusted to sit inside Fortune 500 codebases, and holds it to the standard those governments taught him.
Our investors and advisors
Y Combinator
Z Fellows
Ritual Capital
Rebel Fund
Liquid 2
Chevron
Costco
Disney
Saks GlobalNot the poster words every company picks. These are the three we actually hold ourselves to.
We build for the people doing the work, and we talk like them, because we are them.
We’re trying to understand one problem more completely than anyone alive. When something’s outside that, or not built yet, we say so.
We keep going until the class is eliminated, the guardrail is set, and the problem has nowhere left to live.
We’re practitioners who care about the craft, and who’d rather eliminate a problem than manage it. If that sounds like you, we’d love to hear from you, even if we haven’t advertised the role yet.
Email careers@gecko.security
The latest news, technologies, and resources from our team.
How Cal.com consolidated noisy security tooling into one continuous, context-aware pull request security program with Gecko.
Gecko Security
Authorization bypass in n8n’s dynamic-credentials OAuth endpoints allows any authenticated user to operate on another user’s OAuth credential by supplying its ID, enabling unauthorized OAuth rebinding and revocation.
Artemiy Malyshau
An IDOR vulnerability in n8n’s public variables API allows authenticated users to read project variables outside their authorized scope, exposing secrets across project boundaries.
Artemiy Malyshau
Learn API scanning for automated security testing. Find vulnerabilities from broken authentication to business logic flaws in your endpoints.
Artemiy Malyshau
A complete guide to automated pentest tools and best practices. Learn what works, what doesn’t, and how to implement continuous security testing.
Artemiy Malyshau
Compare the best AI-powered application security testing tools. Find which tools detect business logic flaws and broken access control.
Artemiy Malyshau
Who we are, who backs us, and why teams trust us with their code.
Talk to us about your security program, or skip the talking and run a scan.
