Gomboc.AI is most useful because it fixes cloud security issues automatically instead of only reporting them. It saves engineering time, works well with existing Git workflows, and is easy to set up with clear documentation. Review collected by and hosted on G2.com.

Gomboc.AI is focused mainly on infrastructure security, so teams may still need other tools for broader application security coverage. Some advanced features may also take time to fully understand for teams new to cloud security workflows. Review collected by and hosted on G2.com.

I really appreciate how Gomboc.AI helps me find and solve vulnerabilities in my infrastructure as code. It's easy to use with Visual Studio Code, making it a handy tool for developers like me. It can fix issues right in the IDE, which is super convenient when I'm coding. I find it very straightforward to quickly scan my code, ensuring I'm developing the right code while keeping security in mind. Additionally, the initial setup was quite easy, just a couple of steps, and it was ready to use. Review collected by and hosted on G2.com.

It does not provide fixes for some of the issues it identifies. This can be improved over time. Review collected by and hosted on G2.com.

Very quick and easy integration with Visual Studio Code to get started.

Gomboc.ai is great if you’re fed up with security tools that just dump alerts on you and call it a day. The UI is simple and stays out of the way, and most of the action happens right where engineers already work in Git. Integrations with GitHub and CI/CD are easy to set up and actually useful, since issues turn straight into pull requests instead of tickets. Fixes are surprisingly fast, and usually correct, which saves a lot of time. The AI is the real highlight: it’s predictable in a good way, no weird guesses, just fixes that work. Review collected by and hosted on G2.com.

I don't have much bad to say right now as I'm still testing it, but so far I'm impressed. Review collected by and hosted on G2.com.

The accuracy of the remediations is exceptional. I love how ecery fix is not just accurate, but also contextual to the environment I'm running this on.

The ability to see what exactly is fixed, why is it fixed, and to approve every one of those (or accept them in "bulk") saved me countless of hours. Review collected by and hosted on G2.com.

Setup was a bit quirky, but once I had the account configured online it was a matter of the usual "copy the key from here to there" and I was up and running.

I'd also like better control over the policies that are being applied, but I guess that's available in the paid version only (good enough for me for now - we'd probably get the enterprise version to support the rest of the DevOps org here) Review collected by and hosted on G2.com.

What I like best about Gomboc.AI is its ability to quickly identify and simplify fixing security issues with clear, developer-friendly suggestions that save time and improve productivity. Review collected by and hosted on G2.com.

One thing I dislike about Gomboc.AI is that troubleshooting can sometimes take time when the extension or integration does not respond as expected, and the error details could be more descriptive for easier debugging. Review collected by and hosted on G2.com.

I use Gomboc.AI to protect our Kubernetes environments. I like that it doesn't just identify problems; it also proposes really concrete changes that align with our zero-trust policy. It helps me analyze our Helm charts and Kubernetes manifests, and it identifies risky configurations like exposed services or missing network policies. Review collected by and hosted on G2.com.

One thing that is not so great is that the automated remediations still have to be reviewed by humans. I feel like our team cannot skip cautious review as there can be consequences that are unintended if we do so. It helps with governance but it isn't yet a substitution. It would be nice to add Kubernetes-native awareness since right now Gomboc.AI is best at Terraform-level fixes. Also, the initial setup was okay but it just takes time. Review collected by and hosted on G2.com.

I like that Gomboc.AI has accurate fixes and not just alerts. It integrates well with our developer workflows, saving me a lot of time on remediation. I have fewer backlogs and less manual work now. It stays up to date with security standards like NIST and SOC 2, which is great. Review collected by and hosted on G2.com.

Initial integration was complex, especially for our large Cloud environment. We did require some support from their engineering team. This product isn't a one size fits all solution for all environments. And I feel like the feature set is still evolving. Before Gomboc.AI can generate correct fixes, teams might often need to map the internal security policies, decide which misconfigurations should be auto fixed versus flagged for human review, and define exceptions for legacy or business critical systems. Review collected by and hosted on G2.com.

What I like best about Gomboc.AI⁠� is its practical approach to cloud security by automatically fixing infrastructure issues through AI-driven remediation, making DevSecOps workflows faster and more reliable. Review collected by and hosted on G2.com.

One thing I dislike about Gomboc.AI⁠� is that the initial setup and integration into complex CI/CD or cloud environments can take significant effort and expertise, especially for large teams. Review collected by and hosted on G2.com.

I like how Gomboc.AI frees up time for me to do more interesting things instead of fixing security issues. It allows me to spend more time building features for our users rather than focusing on security vulnerabilities. The initial setup was very simple and took just 5 minutes. Review collected by and hosted on G2.com.

I think Gomboc.AI could add better explanations for some of the PRs it writes. It would be more helpful if it was clearer about what the PR is accomplishing and how. Review collected by and hosted on G2.com.

I use Gomboc.AI for IAC code scanning, and I find it helps ensure the code we are developing on our platform is secure. I like how simple it is to set up and how intuitive it is to use, with easy-to-understand results. Scanning code inside Git and preparing code-ready fixes for review without needing engineering time is really helpful. The initial setup is easy and straightforward. Review collected by and hosted on G2.com.

Nothing that I can note at the moment Review collected by and hosted on G2.com.