Guides· 6 min read
Why Gecko Isn’t an IaC Scanner, and What It Actually Does
Learn why Gecko Security isn’t an IaC scanning tool and what it actually does. Compare IaC scanners with application security testing.
Artemiy Malyshau
Resources
Research, guides and the root causes underneath
Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Latest articles
Research· 6 min readRCE in Your Test Suite: AI Agent Skills and the Attack Vector Skill Scanners Miss
When a developer runs npx skills add, the installer copies the entire skill directory into the repo. If a malicious skill includes a *.test.ts file, it runs during npm test and silently give an attacker full access to the developer’s machine.
Jeevan “JJ” Jutla
Research· 8 min readBusiness Logic Is AppSec’s Unsolved Problem
Broken access control has been the #1 vulnerability class since 2021. This post explores why it’s unsolved, why it will get worse, and how LLMs can bridge the gap.
Jeevan “JJ” Jutla
Showing 25 - 27 of 47 articles
Stay connected with Gecko Security
Occasional updates and insights. No spam; unsubscribe anytime.