GeckoFlag is a JIRA-style issue and project management tool built with CakePHP. It's a self-hosted, one-time-purchase piece of software that you install on your own server.
No, GeckoFlag is only available as a self-hosted version. You install it in your own server environment.
We provide a demo site so you can check out the screens and overall feel before purchasing.
https://demo.geckoflag.com/users/login
Yes, you're free to edit and customize the source code (redistribution or resale is prohibited).
GeckoFlag is a self-hosted tool you buy once for $30, with no per-user fees. You install it on your own server or hosting, so your data stays with you. Jira is a cloud service billed per user, with advanced automation, AI features and a large range of integrations. Note that Jira's self-managed Data Center edition is no longer sold to new customers. For a detailed comparison, see GeckoFlag vs Jira.
Both are self-hosted, but Redmine runs on Ruby on Rails and usually needs a VPS and command-line setup, while GeckoFlag runs on PHP and MySQL/MariaDB and installs on common shared hosting through a browser-based installer. GeckoFlag also includes a Kanban board out of the box. Redmine, on the other hand, is free open-source software with a wiki, time tracking and a large plugin ecosystem. For a detailed comparison, see GeckoFlag vs Redmine.
You'll need PHP 8.2+, MySQL/MariaDB, and a web server (Apache/Nginx) that supports CakePHP 5.x. See the manual for the full requirements.
We've confirmed it works on many common shared hosting providers. That said, depending on PHP settings such as upload_max_filesize, file upload features may be limited.
It's not strictly required, but since GeckoFlag handles login credentials and personal data, we strongly recommend running it over HTTPS.
Yes, GeckoFlag uses a responsive design, so it also works from smartphone and tablet browsers.
Yes. A dedicated installer walks you through entering your database connection details and creating an administrator account, so anyone can set it up easily.
We ask that you install GeckoFlag yourself; we don't currently offer an installation service.
Yes. The distributed package includes all dependencies (the vendor folder), so you can install it as-is even in an environment where you can't run Composer.
During installation you'll point GeckoFlag at a new database, or an existing empty one. We don't recommend sharing a database with another application.
No. Each license (purchase code) is valid for use on a single domain. The same purchase code cannot be reused across multiple domains.
You can deactivate your license yourself from the license settings in the admin dashboard, then activate it again on the new domain.
Each license covers one domain. If you'd like to test on a separate domain for development or staging, please purchase an additional license, or use the license deactivation feature to move it temporarily.
Yes, your server needs to reach our license server during initial installation and for periodic re-verification afterward.
As a rule, we don't offer refunds, given the nature of digital products. Please check the demo site before purchasing.
Yes, your purchased license entitles you to free future updates.
GeckoFlag currently supports 15 languages: English, Spanish, Portuguese, French, German, Italian, Turkish, Japanese, Korean, Chinese (Simplified and Traditional), Indonesian, Vietnamese, Thai, and Arabic.
Yes, each user can switch their display language individually from their profile settings.
Yes, you can choose from 24 time zones to match your region.
You can record a title, issue type, status, priority, assignee, reporter, start/due dates, comments, and more.
They're automatically numbered sequentially per project (e.g. PJ1-1, PJ1-2...).
Yes, you can post comments in rich text. You can also change the status, assignee, and other fields at the same time as posting a comment.
By default, the 3 most recent comments are shown. Older comments are collapsed and can be expanded with a click.
Yes, when posting a comment you can choose which project members to notify, and they'll receive an email notification.
There's no limit imposed by the system itself (it depends on your server's capacity).
Yes, you can upload and share files per project, up to 10MB each.
Yes, you can view your project schedule as a Gantt chart.
Not at this time. We're considering support for this in a future update.
Yes, GeckoFlag supports a board view with cards arranged by status. From version 1.8.0, you can also change an issue's status by dragging and dropping its card (PC only).
No. Import only creates new records; it never overwrites (updates) existing data. Rows with a duplicate project key are skipped.
Rows referencing a project key that doesn't exist, or an unregistered status, priority, or assignee, are skipped. Once the import finishes, the screen shows how many rows succeeded and how many were skipped, along with the reasons.
Yes, you can export projects and issues independently as CSV files.
You run backups manually from the admin dashboard and download them immediately as a ZIP file (nothing is stored on the server). A backup is also created automatically whenever you run an update.
No. To prevent misuse, license information is always excluded from backup and restore. Restoring to a different domain will never copy over the license status.
Just upload the distributed update ZIP file from “Software Update” in the admin dashboard — file updates and database migrations run automatically.
The site temporarily switches to maintenance mode, and regular users see a maintenance screen. It automatically returns to normal once the update finishes.
If it fails, maintenance mode is automatically lifted, so the site won't be left stuck and unavailable. You can also restore from a backup taken beforehand.
In addition to a file-extension blocklist, image files are validated against their actual data (using functions like getimagesize()) to prevent malicious file uploads.
Content entered in the rich text editor is sanitized on the server (using HTMLPurifier), which prevents malicious script injection (XSS).
No, image attachments are not supported there.
Yes. After 5 failed login attempts for the same email address within 15 minutes, further attempts are temporarily blocked.
Yes, passwords must be at least 8 characters and combine letters and numbers.
Yes, there's a feature in the admin dashboard to change the login URL to a custom path.
Yes, exclusion from search engines is configured out of the box (robots.txt, noindex meta tags, and response headers), so you can run it privately as an internal tool.
This isn't built into the application itself, but you can configure it separately at the server level (for example, via .htaccess).
Yes, you can freely change the site name, logo image, footer text, and more from the admin dashboard, so you can run it under your own brand.
Yes. Dark mode is supported as of Version 1.4.0. Each user can switch it on or off from their own profile page.
For bug-related support, we'll release updates as quickly as possible. Please don't hesitate to contact us.
Please reach out through our Contact form on this site.
No matching questions found.