Aevral

AI-native code security

Gecko Security and Aevral, at a glance

Gecko analyzes code, logic, and infrastructure for exploitable vulnerabilities, with threat modelling, natural-language rules, and a pull-request review bot with one-click autofix, per Gecko's site.

Gecko builds a semantic graph of the application and scans across repositories and microservices for issues that surface between trust boundaries, with a pull-request review bot with one-click autofix, per Gecko's site. Aevral is built for a reading of its own: does this diff widen who has access to what, or carry injection, XSS, SSRF, path traversal, or LLM-integration flaws. Both read pull requests for security: Gecko with its bot, and Aevral's PR review, live on install, on the same pull request.

Gecko Security focuses on

  • Scanning code, logic, and infrastructure for exploitable vulnerabilities with a semantic graph.
  • Scanning across repositories and microservices for cross-boundary issues, with threat modelling and natural-language rules, per Gecko's site.
  • Reviewing pull requests with a bot and one-click autofix.

Aevral adds alongside

  • The access reading of the pull request: dropped ownership checks, caller-controlled object references, gates that went from a role to a login.
  • Live on install: up to five findings per review, grounded on the added lines, posted as a Check plus inline comments. It never blocks a merge.
  • A finding as a lead with evidence: the author decides with full information.

Run them together

Let Gecko run its semantic scans and PR bot; let Aevral add its security reading of the same pull requests, live on install.

Gecko Security and Aevral, in depth; Aevral PR security review.

Also alongside

Security review, handled.

Install the GitHub App and PR review starts on. Sign in with GitHub to connect it, then press Scan for the repository you already have.

Install the GitHub AppLog inSign up

For professional use. By installing, you confirm you can act for the account or organization that owns it, and you accept the Terms and DPA on its behalf.