Gomboc.AI Reviews & Product Details

Very quick and easy integration with Visual Studio Code to get started.

Gomboc.ai is great if you’re fed up with security tools that just dump alerts on you and call it a day. The UI is simple and stays out of the way, and most of the action happens right where engineers already work in Git. Integrations with GitHub and CI/CD are easy to set up and actually useful, since issues turn straight into pull requests instead of tickets. Fixes are surprisingly fast, and usually correct, which saves a lot of time. The AI is the real highlight: it’s predictable in a good way, no weird guesses, just fixes that work. Review collected by and hosted on G2.com.

I don't have much bad to say right now as I'm still testing it, but so far I'm impressed. Review collected by and hosted on G2.com.

The accuracy of the remediations is exceptional. I love how ecery fix is not just accurate, but also contextual to the environment I'm running this on.

The ability to see what exactly is fixed, why is it fixed, and to approve every one of those (or accept them in "bulk") saved me countless of hours. Review collected by and hosted on G2.com.

Setup was a bit quirky, but once I had the account configured online it was a matter of the usual "copy the key from here to there" and I was up and running.

I'd also like better control over the policies that are being applied, but I guess that's available in the paid version only (good enough for me for now - we'd probably get the enterprise version to support the rest of the DevOps org here) Review collected by and hosted on G2.com.

I use Gomboc.AI to protect our Kubernetes environments. I like that it doesn't just identify problems; it also proposes really concrete changes that align with our zero-trust policy. It helps me analyze our Helm charts and Kubernetes manifests, and it identifies risky configurations like exposed services or missing network policies. Review collected by and hosted on G2.com.

One thing that is not so great is that the automated remediations still have to be reviewed by humans. I feel like our team cannot skip cautious review as there can be consequences that are unintended if we do so. It helps with governance but it isn't yet a substitution. It would be nice to add Kubernetes-native awareness since right now Gomboc.AI is best at Terraform-level fixes. Also, the initial setup was okay but it just takes time. Review collected by and hosted on G2.com.

I like that Gomboc.AI has accurate fixes and not just alerts. It integrates well with our developer workflows, saving me a lot of time on remediation. I have fewer backlogs and less manual work now. It stays up to date with security standards like NIST and SOC 2, which is great. Review collected by and hosted on G2.com.

Initial integration was complex, especially for our large Cloud environment. We did require some support from their engineering team. This product isn't a one size fits all solution for all environments. And I feel like the feature set is still evolving. Before Gomboc.AI can generate correct fixes, teams might often need to map the internal security policies, decide which misconfigurations should be auto fixed versus flagged for human review, and define exceptions for legacy or business critical systems. Review collected by and hosted on G2.com.

I like how Gomboc.AI frees up time for me to do more interesting things instead of fixing security issues. It allows me to spend more time building features for our users rather than focusing on security vulnerabilities. The initial setup was very simple and took just 5 minutes. Review collected by and hosted on G2.com.

I think Gomboc.AI could add better explanations for some of the PRs it writes. It would be more helpful if it was clearer about what the PR is accomplishing and how. Review collected by and hosted on G2.com.

I use Gomboc.AI for IAC code scanning, and I find it helps ensure the code we are developing on our platform is secure. I like how simple it is to set up and how intuitive it is to use, with easy-to-understand results. Scanning code inside Git and preparing code-ready fixes for review without needing engineering time is really helpful. The initial setup is easy and straightforward. Review collected by and hosted on G2.com.

Nothing that I can note at the moment Review collected by and hosted on G2.com.

I mainly use Gomboc.AI for its automation in remediation which directly makes PRs to fix security risks. I like that it uses deterministic AI because it makes it more robust. I also appreciate its compliance with standards like HIPAA, as it enforces policies directly in the code, saving time and making it more auditable. Review collected by and hosted on G2.com.

I think it would be nice to have more integration with other IaCs like Ansible because right now only Terraform is supported. Review collected by and hosted on G2.com.

Gomboc.AI is its use of deterministic AI to provide accurate, policy-driven fixes for cloud infrastructure security issues, often delivered as pull requests that integrate directly into existing developer workflows. This approach aims to eliminate the security-ticket backlog by automating remediation and reducing the manual effort for DevOps and security teams. Its focus on deterministic AI provides predictable, auditable, and production-ready changes, setting it apart from generative AI approaches. Review collected by and hosted on G2.com.

While Gomboc.AI is designed to be GitOps-native and fit existing workflows, integrating any new security tool into complex, existing CI/CD pipelines and large-scale cloud environments can require significant initial effort and expertise. Review collected by and hosted on G2.com.

I like the easy setup and integration of Gomboc.AI in Vscode. It's straightforward to use, as you just get an API Key and set it up in the extension settings. I also appreciate that you can simply ask it to check your IaS code from the lateral menu, which helps in avoiding human errors. Review collected by and hosted on G2.com.

I dislike the spam that comes with using Gomboc.AI. Review collected by and hosted on G2.com.

I like that Gomboc.AI saves time, reduces risks, and enforces best practices without adding complexity. The initial setup was pretty easy and not complex to configure. Review collected by and hosted on G2.com.

I think the reporting dashboard could be clearer and it should also report secrets management. It would be better if it could find plaintext passwords and enforce policies to restrict their use. Review collected by and hosted on G2.com.