Skip to main content
Gecko runs as a managed service, with a hybrid option for teams that need code to stay inside their own cloud. Both models share the same dashboard and findings experience.

​
Deployment options

The standard deployment. The Gecko app runs on Vercel and the scanner runs in Gecko’s AWS environment. You connect a provider, scans run on Gecko’s infrastructure, and results appear in your dashboard.For IP-restricted source control, Gecko reaches your instance from a fixed set of IP addresses. See Network & IP allowlist.

​
Why GitLab needs an allowlist but GitHub.com doesn’t

GitHub.com and GitLab.com are public and reachable from anywhere, so Gecko connects without any network changes. Self-managed GitLab, GitLab Dedicated, and GitHub Enterprise Server often sit behind IP restrictions, so Gecko must reach them from known IP addresses, which is exactly what the network allowlist provides.