Gomboc.ai Platform

What do you like best about the product?

What I like best about Gomboc.AI is its ability to quickly identify and simplify fixing security issues with clear, developer-friendly suggestions that save time and improve productivity.

What do you dislike about the product?

One thing I dislike about Gomboc.AI is that troubleshooting can sometimes take time when the extension or integration does not respond as expected, and the error details could be more descriptive for easier debugging.

What problems is the product solving and how is that benefiting you?

Gomboc.AI helps solve DevOps security and infrastructure misconfiguration issues by detecting vulnerabilities early in CI/CD and cloud environments. It benefits me by reducing manual troubleshooting, improving deployment security, and speeding up remediation during development and operations workflows.

What do you like best about the product?

Gomboc.AI is most useful because it fixes cloud security issues automatically instead of only reporting them. It saves engineering time, works well with existing Git workflows, and is easy to set up with clear documentation.

What do you dislike about the product?

Gomboc.AI is focused mainly on infrastructure security, so teams may still need other tools for broader application security coverage. Some advanced features may also take time to fully understand for teams new to cloud security workflows.

What problems is the product solving and how is that benefiting you?

Gomboc.AI helps solve the problem of manually fixing cloud security and infrastructure issues. By generating fixes automatically, it reduces repetitive work, speeds up remediation, and helps teams maintain more secure cloud environments with less effort.

What do you like best about the product?

I really appreciate how Gomboc.AI helps me find and solve vulnerabilities in my infrastructure as code. It's easy to use with Visual Studio Code, making it a handy tool for developers like me. It can fix issues right in the IDE, which is super convenient when I'm coding. I find it very straightforward to quickly scan my code, ensuring I'm developing the right code while keeping security in mind. Additionally, the initial setup was quite easy, just a couple of steps, and it was ready to use.

What do you dislike about the product?

It does not provide fixes for some of the issues it identifies. This can be improved over time.

What problems is the product solving and how is that benefiting you?

Gomboc.AI helped me find vulnerabilities in my infrastructure as code and fix them, ensuring security. It feels handy and easy to use in Visual Studio Code, quickly scanning and fixing issues right in the IDE.

What do you like best about the product?

What I like best about Gomboc.AI⁠� is its practical approach to cloud security by automatically fixing infrastructure issues through AI-driven remediation, making DevSecOps workflows faster and more reliable.

What do you dislike about the product?

One thing I dislike about Gomboc.AI⁠� is that the initial setup and integration into complex CI/CD or cloud environments can take significant effort and expertise, especially for large teams.

What problems is the product solving and how is that benefiting you?

Gomboc.AI solves the problem of manually fixing cloud infrastructure and security misconfigurations by automatically generating secure, merge-ready code fixes inside existing DevOps workflows. This helps reduce remediation time, improves security consistency, lowers alert fatigue, and allows engineering teams to focus more on development instead of manually handling security issues and backlog tickets.

What do you like best about the product?

Very quick and easy integration with Visual Studio Code to get started.
Gomboc.ai is great if you’re fed up with security tools that just dump alerts on you and call it a day. The UI is simple and stays out of the way, and most of the action happens right where engineers already work in Git. Integrations with GitHub and CI/CD are easy to set up and actually useful, since issues turn straight into pull requests instead of tickets. Fixes are surprisingly fast, and usually correct, which saves a lot of time. The AI is the real highlight: it’s predictable in a good way, no weird guesses, just fixes that work.

What do you dislike about the product?

I don't have much bad to say right now as I'm still testing it, but so far I'm impressed.

What problems is the product solving and how is that benefiting you?

It helped me speed up my workflows without me having to painstakingly perform the checks manually.

What do you like best about the product?

The accuracy of the remediations is exceptional. I love how ecery fix is not just accurate, but also contextual to the environment I'm running this on.
The ability to see what exactly is fixed, why is it fixed, and to approve every one of those (or accept them in "bulk") saved me countless of hours.

What do you dislike about the product?

Setup was a bit quirky, but once I had the account configured online it was a matter of the usual "copy the key from here to there" and I was up and running.
I'd also like better control over the policies that are being applied, but I guess that's available in the paid version only (good enough for me for now - we'd probably get the enterprise version to support the rest of the DevOps org here)

What problems is the product solving and how is that benefiting you?

Handling multiple alerts from multiple products that are bugging us about security issues and general SRE hygiene. Gomboc takes care of those contextually, and actually addresses multiple tickets in one "shot" - which saves me hours of cross-referencing these and trracking them down in Jira (and in various excel files for our policies that need to be met for different clients)

What do you like best about the product?

I like that Gomboc.AI quickly detects errors in my IaS code, helping to avoid mistakes efficiently. It provides useful resolution proposals, which is really handy. I also appreciate the seamless integration with VSCode, and the initial setup was straightforward since all you need is an API key.

What do you dislike about the product?

Sometimes the proposal is not the best

What problems is the product solving and how is that benefiting you?

I use Gomboc.AI to review my IaS code, which helps me with fast detecting errors and provides resolution proposals, avoiding errors. I also appreciate the integration with VSCode.

What do you like best about the product?

I like that Gomboc.AI is well integrated in VS Code so I can use it without going to an external browser. This integration helps me not lose my focus while I'm working.

What do you dislike about the product?

I don't like the way you have to set it up as you have to go to their website to get an API Key.

What problems is the product solving and how is that benefiting you?

Gomboc.AI helps me avoid human errors and boosts my productivity.

What do you like best about the product?

I like the easy setup and integration of Gomboc.AI in Vscode. It's straightforward to use, as you just get an API Key and set it up in the extension settings. I also appreciate that you can simply ask it to check your IaS code from the lateral menu, which helps in avoiding human errors.

What do you dislike about the product?

I dislike the spam that comes with using Gomboc.AI.

What problems is the product solving and how is that benefiting you?

I use Gomboc.AI to check my Terraform code, which helps avoid human errors. Its easy setup and integration in VSCode allows me to check IaC directly from the lateral menu.

What do you like best about the product?

I mainly use Gomboc.AI for its automation in remediation which directly makes PRs to fix security risks. I like that it uses deterministic AI because it makes it more robust. I also appreciate its compliance with standards like HIPAA, as it enforces policies directly in the code, saving time and making it more auditable.

What do you dislike about the product?

I think it would be nice to have more integration with other IaCs like Ansible because right now only Terraform is supported.

What problems is the product solving and how is that benefiting you?

I use Gomboc.AI to automate remediation by making PRs to fix security risks and it helps manage alert overload by listing fixes directly.