# Gomboc AI

Gomboc AI is a cybersecurity company based in the United States, founded in 2022. It has 1 product listed on CybersecTools.

> AI-powered IaC security platform automating cloud misconfiguration detection in CI/CD.

Source: https://cybersectools.com/companies/gomboc-ai · Updated October 2026

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security)
- Type: Product vendor
- Headquarters: United States
- Founded: 2022
- Products listed: 1
- Website: [gomboc.ai](https://gomboc.ai/)

## What does Gomboc AI do?

Gomboc AI is a cloud infrastructure security company that provides an AI-driven platform for automating the security and compliance of Infrastructure-as-Code (IaC). The platform integrates into Git-based DevOps pipelines (GitHub, GitLab) to automatically scan pull requests (PRs) containing Terraform, CloudFormation, and Puppet configurations for misconfigurations and policy violations.

Core capabilities include:
- Automated PR review and policy enforcement using pre-built and custom security rules
- Real-time, in-PR feedback enabling developer self-remediation of misconfigurations before deployment
- Centralized compliance dashboard providing visibility across large repository portfolios
- Support for organization-specific security policies alongside out-of-the-box rules
- A Community Edition available for broader adoption

Gomboc AI targets platform engineering, DevOps, and security teams at organizations managing large-scale cloud infrastructure. Its primary use case is shifting security left by catching and resolving IaC misconfigurations pre-deployment, reducing manual review workload, and enforcing consistent security policy coverage across cloud environments.

The company was co-founded by Ian Amit (CEO), a security industry veteran with prior roles at Rapid7, ZeroFOX, and Amazon, and Matt Sweeney (CPO), formerly of Google Cloud Security/Mandiant and Fortinet. Investors include Hetz Ventures, Ballistic Ventures, and Glilot Capital Partners. The company is US-based and hiring software engineers.

Categories: [Application Security](https://cybersectools.com/categories/application-security), [Cloud Security](https://cybersectools.com/categories/cloud-security), [GRC](https://cybersectools.com/categories/grc)

## Gomboc AI products

- [Gomboc AI ACSA](https://cybersectools.com/tools/gomboc-ai-acsa): AI-powered IaC remediation tool that auto-generates merge-ready security fix PRs. (commercial)

---

More on Gomboc AI: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md