What Binary Gecko does

Binary Gecko GmbH is a Berlin-based, privately held cybersecurity firm founded in 2023 that delivers tailor-made offensive and defensive security solutions to enterprise and government clients. Its core offerings center on vulnerability research, advanced exploitation technique development, and bespoke defensive products, supported by a team described as 'world class, highly technical professionals.' Publicly disclosed technical work includes original CVE-grade research such as CVE-2024-46713 (Linux kernel perf_events race condition), Chrome ipcz TOCTOU sandbox-escape analysis, and Apple Silicon MTE kernel panic tooling, establishing credibility with buyers of high-end offensive security services.

The firm's business model combines professional services (project-based or retainer consulting) with subscription-based defensive products, complemented by two community-driven assets: OffensiveCon — an international offensive security conference run in Berlin and Tokyo (acquired by Binary Gecko in August 2024 along with Blue Frost Security) — and Gecko Academy, a free one-year offensive cybersecurity training program delivered in-person in Buenos Aires. The academy functions as a structured talent pipeline, with top performers eligible for Binary Gecko internships, creating a recruiting and brand flywheel that supports the company's growth.

The go-to-market approach is community-led, using technical blog content, conference presence, and academy programming to attract enterprise clients and elite talent. Revenue is generated primarily through direct enterprise sales of consulting engagements and defensive products, with conferences providing ancillary ticket revenue. The company operates across Europe (Germany), Asia-Pacific (Japan), and Latin America (Argentina), and maintains a 100% remote hiring posture for specialized researchers.

Name

Binary Gecko

Legal name

Binary Gecko GmbH

Website

https://binarygecko.com

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

11–50 employees

Short description

Binary Gecko GmbH is a Berlin-based boutique cybersecurity firm founded in 2023 that delivers tailor-made offensive and defensive security services, vulnerability research, and bespoke defensive products to enterprise and government clients, supplemented by the OffensiveCon conferences and Gecko Academy training program.

Ownership category

akta.pro rank

Product category

Offensive Security Services

NAICS

Other Computer Related Services (541519), Computer Systems Design Services (541512)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Computer Programming Services (7371)

akta.pro primary industry

Application Security & DevSecOps Services (BPAKAHAJ)

akta.pro secondary industries

Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF), Application Security & Secure Software (DevSecOps) (EDAOAIAK)

Keywords

• Offensive security services
• Vulnerability research
• Penetration testing
• Cybersecurity consulting
• Security training programs

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Cybersecurity Consulting Services: Binary Gecko provides tailor-made cybersecurity solutions and services to clients, suggesting project-based or retainer-based professional services engagements for defensive and offensive security assessments.
2. Defensive Security Products: The company offers defensive products designed to protect clients from cyber threats, implying product-based revenue alongside services.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels3 records

Core offering

Binary Gecko GmbH provides tailor-made offensive and defensive cybersecurity solutions and services delivered by a team of world-class technical professionals with proven track records. The company also operates OffensiveCon, an international security conference held in Berlin and Tokyo focused exclusively on offensive security topics, and runs Gecko Academy, a free one-year offensive cybersecurity crash-course training program delivered in Buenos Aires. The firm's blog publishes deep vulnerability research including Linux kernel and Chrome browser exploits.

Product overview

Binary Gecko GmbH operates as a cybersecurity services firm offering two primary programs alongside direct security consulting. The core offering consists of tailor-made defensive and offensive cybersecurity solutions delivered by a team of world-class technical professionals. The company also organizes OffensiveCon, an international security conference focused exclusively on offensive security topics. Additionally, Gecko Academy is a free one-year intensive training program in offensive cybersecurity, designed to cultivate the next generation of vulnerability researchers, with an in-person delivery model in Buenos Aires led by industry experts. The company's blog documents vulnerability research including Chrome exploitation, Linux kernel vulnerabilities, and Apple Silicon MTE research.

Differentiator

Problem solved

Functional benefit

Products and services

• Tailor-made Cybersecurity Solutions and Services Bespoke cybersecurity consulting covering defensive protections and offensive security assessments, including vulnerability discovery, advanced exploitation technique development, and penetration testing for enterprise and government clients.
• Defensive Security Products Defensive products designed to protect clients from cyber threats, offered on a recurring subscription basis as part of Binary Gecko's product portfolio.
• OffensiveCon An international security conference organized by Binary Gecko and focused exclusively on offensive IT security, bringing the hacker community together for high-quality deep technical talks on vulnerability discovery, advanced exploitation techniques, and reverse engineering, alongside renowned technical trainings. Held in Berlin and Tokyo.
• Gecko Academy A free one-year offensive cybersecurity crash-course program designed to prepare the next generation of vulnerability researchers. Participants earn a scholarship by completing a challenge and receive in-person training in Buenos Aires as a 7-10 module intensive program led by industry experts including Ricardo Narvaja and Daniel Kazimirow; top performers may be selected for internships at Binary Gecko.

Quantifiable outcome

• CVE-2024-46713 discovered and responsibly disclosed to Linux kernel security team
• +1 more outcomes

Segments2 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• FuzzingLabsminorStrategic or Co-development PartnerFuzzingLabs researchers Patrick Ventuzelo and Atlan Pinabel gave a talk at OffensiveCon 2026 titled 'Navigating the MTE Landscape: iOS Memory Protection Deep Dive', which served as reference material for Binary Gecko's subsequent MTE panic analysis research. The relationship appears to be community/academic collaboration rather than formal commercial partnership.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Trail of Bits: US-based offensive security consultancy known for deep vulnerability research and tooling. Highly comparable to Binary Gecko in focus areas (kernels, browsers, exploit development) and boutique, research-led GTM.
• Cure53: Berlin-based boutique specializing in web and application security research. Closest geographic and model peer—small team of senior researchers doing bespoke offensive engagements.
• Quarkslab: French offensive security and reverse-engineering firm with a strong research culture. Comparable in depth of expertise (kernels, mobile, binaries) and service-led model.
• SRLabs: Berlin-based security research firm with strong offensive and hardware/embedded focus. Similar boutique, research-driven model and German operating context.
• Outflank: Netherlands-based boutique specializing in offensive tooling and red-team operations. Comparable size and focus, with strong research credibility in the European offensive community.
• NCC Group / MDSec (merged): UK boutique offensive security firm (now part of NCC Group) historically known for deep exploit development research. Comparable model to Binary Gecko pre-acquisition and a relevant benchmark for boutique-to-incumbent trajectories.

Broad incumbents

• NCC Group: Large UK-listed cybersecurity services firm with a global offensive security practice. Competes for the same enterprise red-teaming and vulnerability research engagements but at much larger scale.
• WithSecure (formerly F-Secure): European-headquartered cybersecurity company with offensive and defensive capabilities. Overlaps with Binary Gecko on enterprise offensive assessments and security consulting.
• PortSwigger: UK-based creator of Burp Suite and a major force in the offensive security ecosystem. Comparable through its researcher community (PortSwigger Web Security Academy) and conference presence, though product-led rather than services-led.
• HackerOne: Bug bounty and vulnerability disclosure platform. Adjacent in the offensive security ecosystem; overlaps on vulnerability research buyers but delivers through a platform model rather than consulting.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/Binary_Gecko

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A2 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Binary Gecko