Sold by: Gecko Security
Gecko is an AI security engineer that finds, validates, and fixes vulnerabilities in your code. Rather than scanning repositories in isolation, Gecko builds a semantic graph across every service and trust boundary in your environment, resolving how functions and data flows actually connect before it reasons about security. Every finding is validated with a working proof of concept and prioritised by whether it is reachable in production, sits behind auth, and touches sensitive data. Rather than fixing vulnerabilities one at a time, Gecko remediates at scale. It traces groups of vulnerabilities back to the design decision that created them, hunts down every variant across the organisation, and eliminates them at the root so they do not come back. Available in cloud, hybrid, and on premise deployments.
Overview
Gecko analyses source code alongside infrastructure configuration, design documentation, and runtime data. Because it resolves how the system is built and deployed, it detects business logic flaws and broken authentication and authorisation chains that pattern based static analysis cannot represent, and it suppresses findings that are not reachable. Related issues are chained into full attack paths, so two low severity findings that combine into an account takeover are scored accordingly rather than reported separately. Security teams can define policies as natural language rules, which Gecko enforces across every repository. Deep multi repository scans run continuously, while pull request checks run on every commit and can block merges by severity.
Findings are assigned to the developer who introduced the issue, with a validated proof of concept attached, which removes the manual triage step. Gecko generates the fix, runs the test suite against it, refactors when tests fail, and opens it as a pull request in the style of the surrounding codebase. Developers refine the patch through comments on the pull request, and Gecko retains that feedback for subsequent findings. Gecko also groups related findings back to their common design decision, fixes the root cause once, and scans the rest of the organisation for variants of the same pattern. Gecko supports GitHub, GitLab, Jira, Linear, and Slack, SSO via SAML or OIDC with SCIM provisioning, and a documented v1 API. Gecko is SOC 2 compliant.
Highlights
- Detects business logic flaws and multi step vulnerabilities. Gecko builds a semantic graph across your code, infrastructure, and services, resolving how data actually flows between trust boundaries to find broken authentication and authorisation chains.
- Validates every finding before it reaches a developer. Each one ships with a working proof of concept and is ranked by whether it is reachable in production and what data it touches, with chained issues scored together as full attack paths.
- Remediates at scale rather than one bug at a time. Gecko writes the fix, tests it, and opens a pull request in the style of your codebase. It then traces groups of findings back to the design decision behind them and removes every variant across the organisation.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Contributing Dev Seat | Access for one contributing developer | $0.01 |
Dimension | Description | Cost/unit |
|---|---|---|
Additional Developer Seat | Seat added beyond the contracted amount | $0.01 |
Custom Usage Fee | Custom charges agreed with your account team | $0.01 |
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Gecko Security offers support via email at gecko@gecko.security . Our team is available Monday-Friday, 9am-6pm EST, with response times within 24 hours for standard issues and 4 hours for critical issues. Enterprise customers receive priority support with dedicated SLAs and a named support contact.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Empower your organization to safely and securely embrace AI.
AI Runtime Security (also known as Prisma AIRS) is an adaptive, purpose-built solution that discovers, protects, and defends every component in the AI ecosystem, applications, models, and data from AI-specific and foundational network threats.
It stops evolving and zero-day threats, prevents data leakage from AI models and apps and safeguards models from misuse and attacks. This is done by combining continuous runtime threat analysis of AI apps, models, and data sets with AI-powered security to detect and stop attackers in real time. Security operations are streamlined because they are delivered as part of a unified security platform, eliminating the need for point products for AI.
Discover, protect, and govern AI across your enterprise. Check Point's AI Defense Plane delivers runtime security for AI agents and applications, continuous adversarial testing, and workforce AI governance, all from a unified platform.
Elevate the security of your AI infrastructure and applications with our comprehensive security assessment service. Our expert team specializes in fortifying AI deployments, including those powered by Amazon SageMaker and Amazon Bedrock, ensuring adherence to advanced security measures and compliance standards. Safeguard your data, operations, and AI models against the ever-evolving landscape of cyber threats.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.