Company· 5 min read
How Cal.com Rebuilt AppSec After Going Closed Source
How Cal.com consolidated noisy security tooling into one continuous, context-aware pull request security program with Gecko.
Gecko Security
Resources
Research, guides and the root causes underneath
Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Latest articles
CVE· 3 min readn8n Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Authorization bypass in n8n’s dynamic-credentials OAuth endpoints allows any authenticated user to operate on another user’s OAuth credential by supplying its ID, enabling unauthorized OAuth rebinding and revocation.
Artemiy Malyshau
CVE· 2 min readCVE-2026-42227: n8n Public API Variables IDOR Allows Cross-Project Secret Disclosure
An IDOR vulnerability in n8n’s public variables API allows authenticated users to read project variables outside their authorized scope, exposing secrets across project boundaries.
Artemiy Malyshau
Guides· 8 min readAPI Scanning: Complete Guide to Automated Security Testing
Learn API scanning for automated security testing. Find vulnerabilities from broken authentication to business logic flaws in your endpoints.
Artemiy Malyshau
Guides· 9 min readAutomated Pentest: Complete Guide to Tools and Best Practices
A complete guide to automated pentest tools and best practices. Learn what works, what doesn’t, and how to implement continuous security testing.
Artemiy Malyshau
Guides· 8 min readBest AI-Powered Application Security Testing Tools
Compare the best AI-powered application security testing tools. Find which tools detect business logic flaws and broken access control.
Artemiy Malyshau
Showing 1 - 6 of 47 articles
Stay connected with Gecko Security
Occasional updates and insights. No spam; unsubscribe anytime.