Getting Started

This guide will help you understand what to expect from the platform and how to get started with your Gomboc journey.

If you already have a Gomboc account, see Log in to an existing account.

Why Gomboc

Gomboc AI allows engineering teams to focus on innovation without worrying about configuration drift and cloud infrastructure misconfigurations. Security teams only need to make policy decisions once to effectively secure cloud environments and maintain compliance.

Key Benefits

Automated Remediation

Gomboc AI automates the process of fixing cloud infrastructure misconfigurations. Once a security policy is set, Gomboc identifies and creates remediation actions automatically, which saves time and reduces the manual effort required to maintain security.

Consistent Fixes

Gomboc AI generates fixes based on the security policies configured by your team. These fixes are published as pull requests, ensuring they are reviewed and integrated consistently and reliably.

Simple Approval Process

Gomboc delivers tailored Infrastructure as Code (IaC) fixes directly into pull requests with clear context and detailed reasoning. This allows DevOps engineers to easily approve or deny each suggested fix, streamlining the remediation process.

Continuous Updates

Gomboc AI continuously scans for issues and pushes remediation fixes for DevOps teams to approve through pull requests. This ensures that all cloud infrastructure security findings are addressed promptly and efficiently.

Default Secure

Security Policies

Gomboc allows you to set security and compliance policies that apply either organization-wide or to specific projects and stages. This ensures that your cloud infrastructure adheres to your defined security standards.

One-Click Policy Creation

With Gomboc, you can create security policies based on common frameworks such as AWS Well-Architected and SOC2 with a single click. This simplifies the process of establishing comprehensive security policies.

Powerful Policy Management

Gomboc provides an easy-to-use policy creation interface with user tagging. Once policies are set, Gomboc automatically generates remediation pull requests for DevOps teams to review and approve, ensuring consistent enforcement of security standards.

Daily AI Updates

Gomboc’s AI model is updated daily with the latest Cloud Service Provider (CSP) documentation. This ensures that Gomboc stays current with the latest security practices and guidelines.

IaC Compatibility

Gomboc works seamlessly with all common Infrastructure as Code (IaC) tools, including Terraform. This allows you to integrate Gomboc into your existing workflows without disruption.

CI/CD Pipelines

Gomboc can push Infrastructure as Code (IaC) directly to your Continuous Integration/Continuous Deployment (CI/CD) pipelines, such as GitHub Actions. This ensures that security checks and remediations are part of your automated deployment process.

Always Synced

Gomboc Projects are continuously synced with your code repositories. This ensures that all changes and updates to your codebase are monitored and evaluated for compliance with your security policies.