Featured

Gomboc AI Expands IaC Automation with Terraform Run Task Integration and New MCP Server

Try out the certified Terraform Run Task integration and a new MCP Server, delivering deterministic AI fixes, faster pipelines, and seamless security-by-default for DevOps teams

Read full Post

Blog

view all
Announcements
Cloud Control
Insights
August 25, 2025

Gomboc AI Expands IaC Automation with Terraform Run Task Integration and New MCP Server

Try out the certified Terraform Run Task integration and a new MCP Server, delivering deterministic AI fixes, faster pipelines, and seamless security-by-default for DevOps teams
Read full Post
August 15, 2025

Scaling Secure Deployments: Automating IaC Fixes Without Slowing DevOps Down

Discover how fix-left automation and deterministic AI deliver secure, compliant IaC deployments without slowing DevOps velocity.
Read full Post
August 4, 2025

Beyond Shift‑Left: The Rise of Automated Security Remediation in DevOps

Discover how to shift from detection to prevention using deterministic AI for fast, scalable DevOps security.
Read full Post
July 31, 2025

Understanding the Gartner Hype Cycle: IT Operations 2025

Read full Post

Gomboc AI Launches Free Community Edition: Deterministic AI for IaC That Engineers Actually Trust

Read full Post
July 7, 2025

Understanding Gartner's Hype Cycle for Infrastructure Platforms, 2025

Understand Gartner's Hype Cycle for Infrastructure Platforms, 2025 - why sovereignty rules, AI rewrites IaC, distributed infra dominates.
Read full Post
June 30, 2025

Understanding the Gartner Hype Cycle: I&O Automation 2025

The 2025 Gartner Hype Cycle for I&O Automation highlights AI assistants for Infrastructure as Code as a high-benefit, emerging technology. In this post, we break down key insights from the report and explain why Gomboc’s deterministic approach to IaC automation was recognized—offering teams a safer,
Read full Post
June 30, 2025

Gomboc Recognized in Eight Gartner® Hype Cycles

Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: AI in IT Operations 2025

Gartner’s 2025 Hype Cycle for AI in IT Operations recognizes Gomboc.ai as a Sample Vendor in AI Assistants for Infrastructure as Code. Learn why deterministic AI is emerging as the trusted path for scalable, secure automation—especially in regulated and mission-critical environments
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Site Reliability Engineering 2025

Gomboc.ai is recognized in the 2025 Gartner® Hype Cycle for Site Reliability Engineering, spotlighting the role of deterministic AI in enabling scalable, secure, and resilient infrastructure. Discover how AI agents, policy-as-code, and continuous compliance automation are shaping the future of SRE
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Cloud Platform Services 2025

Gartner’s 2025 Hype Cycle for Cloud Platform Services highlights Gomboc.ai as a Sample Vendor in AI Assistants for Infrastructure as Code. Explore what this means for DevOps and platform teams seeking faster, safer cloud delivery through automation, composability, and policy-driven remediation.
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Operations and Automation in the Communications Industry, 2025

Gartner’s 2025 Hype Cycle calls out DevSecOps as a transformational, near-mainstream capability - naming Gomboc.ai alongside major players like Wiz and Palo Alto Networks. This blog breaks down what that means for CSPs, DevOps leaders, and platform engineers looking to stay ahead of the curve
Read full Post
June 12, 2025

The Future of DevSecOps Is Deterministic

Learn how deterministic AI is revolutionizing DevSecOps—automating cloud security fixes and empowering teams to ship secure code with confidence. Read why the future of security is predictable, scalable, and developer-friendly
Read full Post
June 4, 2025

Gomboc AI Named to Rising in Cyber 2025 List of Top Cybersecurity Startups for the Second Consecutive Year

Gomboc AI earns a spot on the prestigious "Rising in Cyber 2025" list for the second consecutive year, highlighting its continued leadership in cloud infrastructure security through deterministic AI and policy-driven automation.
Read full Post
May 29, 2025

Drift Happens: Why Continuous IaC Validation is Non-Negotiable

Explore why drift happens in IaC-managed environments, the risks it introduces, and why continuous validation—not periodic scans—is essential for cloud security and reliability
Read full Post
May 22, 2025

Policy-as-Code vs. IaC Security: What’s the Real Difference?

In the part 3 of our blog series Securing Your Cloud, One Line of Code at a Time, Learn why Policy-as-Code ≠ IaC Security, how combining them prevents misconfigs (like public S3 buckets), and automates compliance
Read full Post
May 15, 2025

Real-World Misconfig Mistakes: What We Learned from High-Profile Cloud Breaches

Securing your cloud, one line of code at a time. Blog 2 of 5 explores real-world IaC misconfigurations and how Gomboc AI prevents them with policy-driven, shift-left remediation.
Read full Post
May 6, 2025

The IaC Maturity Curve: Are You Securing or Scaling Your Risk?

Learn how the IaC Maturity Curve helps teams scale infrastructure securely—minimizing misconfigurations, enforcing policy-as-code, and automating remediation.
Read full Post
April 15, 2025

How Infrastructure as Code Security Shields Your Cloud Ecosystem from Silent Threats

Learn how to secure Infrastructure as Code by identifying overlooked risks, avoiding cross-cloud pitfalls, and embedding security across your DevOps pipeline.
Read full Post
April 9, 2025

Gomboc AI Unveils Industry-First Integrations with Wiz, Orca, and Prisma Cloud to Automate CSPM Alert Remediation

Read full Post
March 28, 2025

Security Incident Review: Leak of Development Key in VSCode Plugin

A responsibly disclosed leak of a dev environment API key in our latest VSCode plugin was addressed withing less than an hour
Read full Post
March 27, 2025

Proactive Defense Starts with the Platform: Why Security Can’t Just Be a Checklist"

Discover why security must be foundational—not an afterthought. Learn how platform engineering shifts cybersecurity from reactive checklists to proactive, developer-first defense
Read full Post
March 27, 2025

Gomboc AI Launches VSCode Plugin to Eliminate Cloud Security Bottlenecks in IaC Deployments

New IDE Integration Empowers Developers to Build Secure Cloud Infrastructure Directly Within Their Workflow
Read full Post
March 21, 2025

What to Really Expect at RSA 2025: Wiz Drama, AI Disillusionment, and Swag for Days

RSA 2025 Predictions: Wiz’s multi-cloud cracks, GenAI’s security reckoning, and why deterministic automation will steal the show
Read full Post
March 18, 2025

Google’s Wiz Acquisition: A Strategic Play That Demands Multi-Cloud Vigilance

Discover how Google’s Wiz acquisition reshapes cloud security. Why multi-cloud vigilance—not vendor loyalty—is critical to avoiding lock-in and compliance risks
Read full Post
March 17, 2025

Infrastructure as Code Security: A Comprehensive Guide

Secure your cloud deployments with this guide to Infrastructure as Code (IaC) security. Discover risks, actionable strategies, and tools like Gomboc.ai to automate compliance and mitigate vulnerabilitie
Read full Post
March 7, 2025

Why 70% of Cloud Breaches Start with IaC Misconfigurations (and How to Fix Them)

IaC misconfigurations cause 70% of cloud breaches. Learn how automation can fix security gaps in Terraform, CloudFormation, and more—before they lead to costly incidents
Read full Post
February 21, 2025

Change Management is Personal Resilience

Explores how embracing transformation, resilience, and adaptability can help professionals thrive in an AI-powered future.
Read full Post
February 19, 2025

Gomboc AI Raises $13M to Revolutionize Cloud Security Remediations with Deterministic AI

Discover how Gomboc AI's groundbreaking technology automates precise cloud security remediations, slashing response times and human error. Dive into the future of proactive, AI-driven protection—where vulnerabilities meet smarter solutions.
Read full Post
February 14, 2025

Beyond Lift-and-Shift: Modernizing Legacy Systems Without Compromise in the Cloud Era

Legacy systems strangling innovation? Cloud migrations blowing budgets? Discover why outdated tech and lift-and-shift shortcuts backfire—and how IaC, DevSecOps, and smarter scaling unlock true modernization. The future starts here...
Read full Post
February 7, 2025

Technical Debt and Modernization: How IaC and AI Security Drive Efficiency

Technical debt hinders scalability. Discover how Infrastructure as Code (IaC) and AI-driven security automate compliance, resolve cloud misconfigurations, and modernize development workflows to enhance DevOps efficiency and accelerate cloud maturity
Read full Post
January 31, 2025

Automation, Layoffs and Humans

Explore AI’s impact on automation, layoffs, and creativity—highlighting the good, the bad, and the unexpected. Discover how AI augments tasks, where it falls short, and why human skills remain essential in 2025
Read full Post
January 29, 2025

Using Deterministic AI to Secure Cloud Infrastructure

A TAG Report Highlights Gomboc AI's Cutting-Edge Cybersecurity Approach
Read full Post
November 5, 2024

Shifting Left to Infrastructure as Code Security in Healthcare‍

Adoption of cloud technologies and DevOps practices has become crucial in healthcare for improving efficiency, scalability, and patient care. As healthcare organizations embrace these digital transformations, Infrastructure as Code (IaC) has emerged as a critical component for managing and deploying
Read full Post
August 9, 2024

AWS CloudFormation vs. Terraform: A Rap Battle

AWS and Terraform had a rap battle last week and we got the footage.
Read full Post
July 31, 2024

Why and How AI Will Replace DevSecOps

Explore how AI is transforming DevSecOps, automating tasks for enhanced security and efficiency.
Read full Post
June 18, 2024

Cloud Control: Q&A with Tim Youngblood on Securing Non-Human Identities and Preparing for AI-Driven Cyber Threats

Discover Tim Youngblood's insights on AI, non-human identities, and cybersecurity strategies for startups. Learn how to align security with business goals, manage NHIs, and tackle global security challenges.
Read full Post
June 11, 2024

Cloud Control: Q&A with Lou Rabon on Defending Against Nation-State Attacks and Advanced Persistent Threats

Join us for a Q&A with Lou Rabon, Founder & CEO of Cyber Defense Group. Discover how to defend against nation-state attacks, advanced persistent threats, and enhance your cybersecurity strategies. Learn from Lou’s expertise in incident response, regulatory compliance, and more.
Read full Post
June 4, 2024

Gomboc AI Named to Rising in Cyber 2024

Gomboc AI was named to Rising in Cyber 2024, an independent list launched by Notable Capital to recognize the most promising cybersecurity companies in the eyes of Chief Information Security Officers (CISOs), venture capital investors, and other security leaders.
Read full Post
May 29, 2024

Cloud Control: Q&A with Dan Le on Tackling IT Challenges with AI and Advanced Cybersecurity Strategies

Discover how Dan Le, Founder & CEO of Red Cup IT, tackles IT challenges with cutting-edge AI and advanced cybersecurity strategies. Learn about proactive threat intelligence, incident response, and the latest in IT compliance. Dive into his insights and stay ahead in cybersecurity.
Read full Post
June 4, 2024

Cloud Control: Q&A with John Poulin on Elevating Application Security in the Age of AI

Explore how John Poulin integrates AI to transform application security. Learn from the CTO of Cloud Security Partners about the latest strategies and insights in securing software in our exclusive interview.
Read full Post
May 21, 2024

Cloud Control: Q&A on Navigating Security and Compliance in Media with Simon Lamprell, CISO at EditShare

Explore how Simon Lamprell, CISO at EditShare, melds AI and security to protect sensitive media content. Discover his strategies for compliance and innovative security in our exclusive interview.
Read full Post
May 14, 2024

Cloud Control: Q&A with Marsha Wilson of ScaleSec on Harnessing Military Discipline for More Robust Cybersecurity

Discover how Marsha Wilson, CEO of ScaleSec, applies military discipline to strengthen cybersecurity. Dive into her strategies for cloud security, compliance, and building resilient teams. A must-read for leaders in cyber and cloud security.
Read full Post
May 7, 2024

Cloud Control: Q&A with Erik Hajnal of Tradeshift on Infusing Fun into Cybersecurity While Keeping Business Front and Center

Join Erik Hajnal, CISO at Tradeshift, as he unveils how blending fun with serious security training can transform team dynamics and align with business goals. Dive into his methods for creating a more approachable and effective security culture.
Read full Post
April 24, 2024

Q&A with SafetyDetectives

This interview explores the inception of Gomboc.AI, the core issues it aims to solve, and its distinct advantages over conventional security solutions in today’s rapidly evolving tech landscape.
Read full Post
April 30, 2024

Cloud Control: Q&A with Ken Toler on Bridging Code and Security in the Future of Cloud Responsibilities

Join Ken Toler as he delves into the evolving role of code in cloud security. Discover key insights on integrating security with modern workloads and the challenges of everything-as-code in our comprehensive interview.
Read full Post
April 23, 2024

Cloud Control: Q&A with DryRun Security's Ken Johnson on Contextual Security Analysis

Explore how Ken Johnson of DryRun Security is redefining application security with Contextual Security Analysis, enhancing how developers integrate security into their daily workflows in our latest Cloud Control interview.
Read full Post
April 16, 2024

Cloud Control: Q&A with Brian Glas on Election Integrity and Cloud Challenges

Dive into a candid chat with Brian Glas as he navigates the shifts in cybersecurity, from shaping the OWASP Top 10 to mentoring the next wave of cyber experts, blending real-world experience with teaching.
Read full Post
April 9, 2024

Cloud Control: Q&A with Mark Milne on AI Innovations and the Power of Partnerships in Cybersecurity

Dive into an interview with Mark Milne, CISO at Westfield, as he shares his expertise on AI in security, strategic partnerships, and building a resilient cybersecurity framework.
Read full Post
March 19, 2024

Cloud Control Special Edition: Q&A with Matt Sweeney, Gomboc's New Chief Product Officer and Co-Founder

Meet Matt Sweeney, Gomboc's Chief Product Officer and Co-Founder, in our special interview. Discover how his expertise and vision aim to revolutionize cloud security by merging AI with practical security solutions, fostering a harmonious relationship between security and engineering teams.
Read full Post
March 26, 2024

Cloud Control: Q&A with Allison Miller, From Cyber Frontlines to Digital Trust

Join Allison Miller as she shares her insights on keeping the digital world safe, the role of AI in security, and how to protect your online space. A must-read for anyone curious about the future of the internet!
Read full Post
February 29, 2024

The Hidden Costs of Fixing Cloud Infrastructure: A Strategic Guide for CISOs

Read full Post
March 19, 2024

Cloud Control: Q&A with Nate Lee on Shifting Left to Outsmart Threats

Join Nate Lee, CISO at Cloudsec.ai, in the Cloud Control Newsletter as he shares his journey and strategies for blending AI with cloud security, fostering a culture of safety and innovation for engineers and security professionals.
Read full Post
March 12, 2024

Cloud Control: Q&A with Mike McCabe on Bridging the Cloud Divide

Read full Post
March 5, 2024

Cloud Control: Q&A with Andy Ellis on Pushing Innovation with Apology Budgets

Sit down with cybersecurity legend, Andy Ellis. From his early days at Akamai to becoming a guiding force for future cybersecurity leaders, Ellis shares valuable lessons on risk management, the importance of adaptive leadership, and his outlook on the evolving cybersecurity landscape.
Read full Post
February 27, 2024

Cloud Control: Q&A with Michael Piacente on Navigating the Cybersecurity Talent Maze

Join us in an exciting conversation with Michael Piacente, Co-Founder of Hitch Partners. Explore his expert perspective on the rapid evolution of CISO roles, challenges in cloud security, and strategies for navigating the competitive landscape of security talent.
Read full Post
February 20, 2024

Cloud Control: Q&A with Gal Shpantzer on Two Decades at the Helm of Security Outliers

Explore the future of cybersecurity with Gal Shpantzer, CEO of Security Outliers. Gain insights on emerging threats, incident response at scale, NIST standards, and the dynamic landscape of privacy and security.
Read full Post
February 13, 2024

Cloud Control: Q&A with Jonathan Cran, Google's Product and Engineering Lead, on Building Top-Tier Cybersecurity Products

Explore the latest cybersecurity trends and insights with Jonathan Cran, Google's Product and Engineering Lead. Gain valuable perspectives on GenAI, cloud security, and emerging technologies. Dive into the challenges of enterprise tech, AI adoption, and product leadership in cybersecurity.
Read full Post
December 13, 2023

Featured in CRN: Top 10 Hottest Cloud Security Startup

We're thrilled to be recognized by CRN as one of top ten hottest cloud security startups of 2023.
Read full Post
February 6, 2024

Cloud Control: Q&A with Jennifer (JJ) Minella on Enhancing Security through Human-Centric Practices

Explore the cybersecurity landscape with Jennifer (JJ) Minella, Founder of Viszen Security. Gain insights into mindfulness-driven leadership, Zero Trust architecture, industry standards, and the future of AI in cybersecurity. Learn how to level up your security with human-centric solutions.
Read full Post
January 30, 2024

Cloud Control: Q&A with Kathy Wang, Former Chief Security Officer at Discord, on Raising the Bar on Security

Dive into advanced cloud security strategies with former CISO Kathy Wang. Explore building effective security teams, incident response best practices, and the latest technologies for effective cybersecurity. Prep yourself (and your team) for the fast-moving world of cybersecurity.
Read full Post
January 23, 2024

Cloud Control: Q&A with Kymberlee Price, Founder and CEO of Zatik Security on Cybersecurity Challenges faced by SMBs

A candid discussion with Kymberlee Price, Founder and CEO of Zatik Security on overcoming cybersecurity challenges as a small or medium-sized business. Dive into the future of open source security strategy, key skillsets for future cybersecurity leaders, and more.
Read full Post
January 16, 2024

Cloud Control: Q&A with Joshua Marpet, BSides Global Council Member & Faculty Member at IANS

Dive into discussions on cloud security challenges, exciting new startup strategies, and the impact of emerging technologies with Joshua Marpet. Joshua's care spans from industry standards committees to being a driving force in the BSides movement.
Read full Post
January 9, 2024

Cloud Control: Q&A with Jonathan Jaffe, Lemonade CISO, on AI & Trends

We sit down with Jonathan Jaffe, Chief Information Security Officer (CISO) at Lemonade to talk AI trends, cybersecurity investments, the role of CISOs, and more.
Read full Post
September 21, 2023

The Fundamentals of Cloud Platform Engineering

In this blog post, we will delve into the key concepts, tools, and best practices that form the foundation of cloud platform engineering. Whether you are a beginner looking to understand the basics or a seasoned professional seeking to enhance your knowledge, this series will provide you with...
Read full Post
August 23, 2023

Black Hat 2023 Recap

Black Hat 2023 was a great experience for our debut conference booth. We are honored to have participated in this year's Startup Spotlight. You can watch our talk below.
Read full Post
August 3, 2023

What is a Gomboc anyway?

Gomboc is a fascinating mathematical shape with unique properties. It is a mono-monostatic body, meaning it has just one stable and one unstable point of equilibrium. This article explores the intricate design, mathematical foundations, and applications of this geometric marvel.
Read full Post
August 7, 2023

Gomboc.ai Raises Over $5M in Seed Funding to Deliver Cloud Infrastructure Remediation With Deterministic AI

Press Release - Gomboc.ai, a deterministic AI-powered cloud infrastructure remediation platform, announced its seed round of over $5M, led by Glilot Capital and Hetz Ventures, and with participation from strategic angel investors.
Read full Post
August 4, 2023

Navigating AI in Cloud Security: Generative vs Deterministic Models for IaC Vulnerability Remediation

We asked ChatGPT to write us a blog post about the differences between deterministic and generative AI. Then we asked it to recommend us which model to use for IaC remediations. The results are not shocking.
Read full Post
August 25, 2025

Gomboc AI Expands IaC Automation with Terraform Run Task Integration and New MCP Server

Try out the certified Terraform Run Task integration and a new MCP Server, delivering deterministic AI fixes, faster pipelines, and seamless security-by-default for DevOps teams
Read full Post

Gomboc AI Launches Free Community Edition: Deterministic AI for IaC That Engineers Actually Trust

Read full Post
June 30, 2025

Gomboc Recognized in Eight Gartner® Hype Cycles

Read full Post
June 4, 2025

Gomboc AI Named to Rising in Cyber 2025 List of Top Cybersecurity Startups for the Second Consecutive Year

Gomboc AI earns a spot on the prestigious "Rising in Cyber 2025" list for the second consecutive year, highlighting its continued leadership in cloud infrastructure security through deterministic AI and policy-driven automation.
Read full Post
April 9, 2025

Gomboc AI Unveils Industry-First Integrations with Wiz, Orca, and Prisma Cloud to Automate CSPM Alert Remediation

Read full Post
March 28, 2025

Security Incident Review: Leak of Development Key in VSCode Plugin

A responsibly disclosed leak of a dev environment API key in our latest VSCode plugin was addressed withing less than an hour
Read full Post
March 27, 2025

Gomboc AI Launches VSCode Plugin to Eliminate Cloud Security Bottlenecks in IaC Deployments

New IDE Integration Empowers Developers to Build Secure Cloud Infrastructure Directly Within Their Workflow
Read full Post
February 19, 2025

Gomboc AI Raises $13M to Revolutionize Cloud Security Remediations with Deterministic AI

Discover how Gomboc AI's groundbreaking technology automates precise cloud security remediations, slashing response times and human error. Dive into the future of proactive, AI-driven protection—where vulnerabilities meet smarter solutions.
Read full Post
January 29, 2025

Using Deterministic AI to Secure Cloud Infrastructure

A TAG Report Highlights Gomboc AI's Cutting-Edge Cybersecurity Approach
Read full Post
June 4, 2024

Gomboc AI Named to Rising in Cyber 2024

Gomboc AI was named to Rising in Cyber 2024, an independent list launched by Notable Capital to recognize the most promising cybersecurity companies in the eyes of Chief Information Security Officers (CISOs), venture capital investors, and other security leaders.
Read full Post
December 13, 2023

Featured in CRN: Top 10 Hottest Cloud Security Startup

We're thrilled to be recognized by CRN as one of top ten hottest cloud security startups of 2023.
Read full Post
August 23, 2023

Black Hat 2023 Recap

Black Hat 2023 was a great experience for our debut conference booth. We are honored to have participated in this year's Startup Spotlight. You can watch our talk below.
Read full Post
August 7, 2023

Gomboc.ai Raises Over $5M in Seed Funding to Deliver Cloud Infrastructure Remediation With Deterministic AI

Press Release - Gomboc.ai, a deterministic AI-powered cloud infrastructure remediation platform, announced its seed round of over $5M, led by Glilot Capital and Hetz Ventures, and with participation from strategic angel investors.
Read full Post
July 31, 2025

Understanding the Gartner Hype Cycle: IT Operations 2025

Read full Post
July 7, 2025

Understanding Gartner's Hype Cycle for Infrastructure Platforms, 2025

Understand Gartner's Hype Cycle for Infrastructure Platforms, 2025 - why sovereignty rules, AI rewrites IaC, distributed infra dominates.
Read full Post
June 30, 2025

Understanding the Gartner Hype Cycle: I&O Automation 2025

The 2025 Gartner Hype Cycle for I&O Automation highlights AI assistants for Infrastructure as Code as a high-benefit, emerging technology. In this post, we break down key insights from the report and explain why Gomboc’s deterministic approach to IaC automation was recognized—offering teams a safer,
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: AI in IT Operations 2025

Gartner’s 2025 Hype Cycle for AI in IT Operations recognizes Gomboc.ai as a Sample Vendor in AI Assistants for Infrastructure as Code. Learn why deterministic AI is emerging as the trusted path for scalable, secure automation—especially in regulated and mission-critical environments
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Site Reliability Engineering 2025

Gomboc.ai is recognized in the 2025 Gartner® Hype Cycle for Site Reliability Engineering, spotlighting the role of deterministic AI in enabling scalable, secure, and resilient infrastructure. Discover how AI agents, policy-as-code, and continuous compliance automation are shaping the future of SRE
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Cloud Platform Services 2025

Gartner’s 2025 Hype Cycle for Cloud Platform Services highlights Gomboc.ai as a Sample Vendor in AI Assistants for Infrastructure as Code. Explore what this means for DevOps and platform teams seeking faster, safer cloud delivery through automation, composability, and policy-driven remediation.
Read full Post
June 25, 2025

Understanding the Gartner Hype Cycle: Operations and Automation in the Communications Industry, 2025

Gartner’s 2025 Hype Cycle calls out DevSecOps as a transformational, near-mainstream capability - naming Gomboc.ai alongside major players like Wiz and Palo Alto Networks. This blog breaks down what that means for CSPs, DevOps leaders, and platform engineers looking to stay ahead of the curve
Read full Post
June 12, 2025

The Future of DevSecOps Is Deterministic

Learn how deterministic AI is revolutionizing DevSecOps—automating cloud security fixes and empowering teams to ship secure code with confidence. Read why the future of security is predictable, scalable, and developer-friendly
Read full Post
May 29, 2025

Drift Happens: Why Continuous IaC Validation is Non-Negotiable

Explore why drift happens in IaC-managed environments, the risks it introduces, and why continuous validation—not periodic scans—is essential for cloud security and reliability
Read full Post
May 22, 2025

Policy-as-Code vs. IaC Security: What’s the Real Difference?

In the part 3 of our blog series Securing Your Cloud, One Line of Code at a Time, Learn why Policy-as-Code ≠ IaC Security, how combining them prevents misconfigs (like public S3 buckets), and automates compliance
Read full Post
May 15, 2025

Real-World Misconfig Mistakes: What We Learned from High-Profile Cloud Breaches

Securing your cloud, one line of code at a time. Blog 2 of 5 explores real-world IaC misconfigurations and how Gomboc AI prevents them with policy-driven, shift-left remediation.
Read full Post
May 6, 2025

The IaC Maturity Curve: Are You Securing or Scaling Your Risk?

Learn how the IaC Maturity Curve helps teams scale infrastructure securely—minimizing misconfigurations, enforcing policy-as-code, and automating remediation.
Read full Post
March 27, 2025

Proactive Defense Starts with the Platform: Why Security Can’t Just Be a Checklist"

Discover why security must be foundational—not an afterthought. Learn how platform engineering shifts cybersecurity from reactive checklists to proactive, developer-first defense
Read full Post
March 18, 2025

Google’s Wiz Acquisition: A Strategic Play That Demands Multi-Cloud Vigilance

Discover how Google’s Wiz acquisition reshapes cloud security. Why multi-cloud vigilance—not vendor loyalty—is critical to avoiding lock-in and compliance risks
Read full Post
February 14, 2025

Beyond Lift-and-Shift: Modernizing Legacy Systems Without Compromise in the Cloud Era

Legacy systems strangling innovation? Cloud migrations blowing budgets? Discover why outdated tech and lift-and-shift shortcuts backfire—and how IaC, DevSecOps, and smarter scaling unlock true modernization. The future starts here...
Read full Post
February 7, 2025

Technical Debt and Modernization: How IaC and AI Security Drive Efficiency

Technical debt hinders scalability. Discover how Infrastructure as Code (IaC) and AI-driven security automate compliance, resolve cloud misconfigurations, and modernize development workflows to enhance DevOps efficiency and accelerate cloud maturity
Read full Post
January 31, 2025

Automation, Layoffs and Humans

Explore AI’s impact on automation, layoffs, and creativity—highlighting the good, the bad, and the unexpected. Discover how AI augments tasks, where it falls short, and why human skills remain essential in 2025
Read full Post
June 18, 2024

Cloud Control: Q&A with Tim Youngblood on Securing Non-Human Identities and Preparing for AI-Driven Cyber Threats

Discover Tim Youngblood's insights on AI, non-human identities, and cybersecurity strategies for startups. Learn how to align security with business goals, manage NHIs, and tackle global security challenges.
Read full Post
June 11, 2024

Cloud Control: Q&A with Lou Rabon on Defending Against Nation-State Attacks and Advanced Persistent Threats

Join us for a Q&A with Lou Rabon, Founder & CEO of Cyber Defense Group. Discover how to defend against nation-state attacks, advanced persistent threats, and enhance your cybersecurity strategies. Learn from Lou’s expertise in incident response, regulatory compliance, and more.
Read full Post
May 29, 2024

Cloud Control: Q&A with Dan Le on Tackling IT Challenges with AI and Advanced Cybersecurity Strategies

Discover how Dan Le, Founder & CEO of Red Cup IT, tackles IT challenges with cutting-edge AI and advanced cybersecurity strategies. Learn about proactive threat intelligence, incident response, and the latest in IT compliance. Dive into his insights and stay ahead in cybersecurity.
Read full Post
June 4, 2024

Cloud Control: Q&A with John Poulin on Elevating Application Security in the Age of AI

Explore how John Poulin integrates AI to transform application security. Learn from the CTO of Cloud Security Partners about the latest strategies and insights in securing software in our exclusive interview.
Read full Post
May 21, 2024

Cloud Control: Q&A on Navigating Security and Compliance in Media with Simon Lamprell, CISO at EditShare

Explore how Simon Lamprell, CISO at EditShare, melds AI and security to protect sensitive media content. Discover his strategies for compliance and innovative security in our exclusive interview.
Read full Post
May 14, 2024

Cloud Control: Q&A with Marsha Wilson of ScaleSec on Harnessing Military Discipline for More Robust Cybersecurity

Discover how Marsha Wilson, CEO of ScaleSec, applies military discipline to strengthen cybersecurity. Dive into her strategies for cloud security, compliance, and building resilient teams. A must-read for leaders in cyber and cloud security.
Read full Post
May 7, 2024

Cloud Control: Q&A with Erik Hajnal of Tradeshift on Infusing Fun into Cybersecurity While Keeping Business Front and Center

Join Erik Hajnal, CISO at Tradeshift, as he unveils how blending fun with serious security training can transform team dynamics and align with business goals. Dive into his methods for creating a more approachable and effective security culture.
Read full Post
April 30, 2024

Cloud Control: Q&A with Ken Toler on Bridging Code and Security in the Future of Cloud Responsibilities

Join Ken Toler as he delves into the evolving role of code in cloud security. Discover key insights on integrating security with modern workloads and the challenges of everything-as-code in our comprehensive interview.
Read full Post
April 23, 2024

Cloud Control: Q&A with DryRun Security's Ken Johnson on Contextual Security Analysis

Explore how Ken Johnson of DryRun Security is redefining application security with Contextual Security Analysis, enhancing how developers integrate security into their daily workflows in our latest Cloud Control interview.
Read full Post
April 16, 2024

Cloud Control: Q&A with Brian Glas on Election Integrity and Cloud Challenges

Dive into a candid chat with Brian Glas as he navigates the shifts in cybersecurity, from shaping the OWASP Top 10 to mentoring the next wave of cyber experts, blending real-world experience with teaching.
Read full Post
April 9, 2024

Cloud Control: Q&A with Mark Milne on AI Innovations and the Power of Partnerships in Cybersecurity

Dive into an interview with Mark Milne, CISO at Westfield, as he shares his expertise on AI in security, strategic partnerships, and building a resilient cybersecurity framework.
Read full Post
March 19, 2024

Cloud Control Special Edition: Q&A with Matt Sweeney, Gomboc's New Chief Product Officer and Co-Founder

Meet Matt Sweeney, Gomboc's Chief Product Officer and Co-Founder, in our special interview. Discover how his expertise and vision aim to revolutionize cloud security by merging AI with practical security solutions, fostering a harmonious relationship between security and engineering teams.
Read full Post
March 26, 2024

Cloud Control: Q&A with Allison Miller, From Cyber Frontlines to Digital Trust

Join Allison Miller as she shares her insights on keeping the digital world safe, the role of AI in security, and how to protect your online space. A must-read for anyone curious about the future of the internet!
Read full Post
March 19, 2024

Cloud Control: Q&A with Nate Lee on Shifting Left to Outsmart Threats

Join Nate Lee, CISO at Cloudsec.ai, in the Cloud Control Newsletter as he shares his journey and strategies for blending AI with cloud security, fostering a culture of safety and innovation for engineers and security professionals.
Read full Post
March 12, 2024

Cloud Control: Q&A with Mike McCabe on Bridging the Cloud Divide

Read full Post
March 5, 2024

Cloud Control: Q&A with Andy Ellis on Pushing Innovation with Apology Budgets

Sit down with cybersecurity legend, Andy Ellis. From his early days at Akamai to becoming a guiding force for future cybersecurity leaders, Ellis shares valuable lessons on risk management, the importance of adaptive leadership, and his outlook on the evolving cybersecurity landscape.
Read full Post
February 27, 2024

Cloud Control: Q&A with Michael Piacente on Navigating the Cybersecurity Talent Maze

Join us in an exciting conversation with Michael Piacente, Co-Founder of Hitch Partners. Explore his expert perspective on the rapid evolution of CISO roles, challenges in cloud security, and strategies for navigating the competitive landscape of security talent.
Read full Post
January 23, 2024

Cloud Control: Q&A with Kymberlee Price, Founder and CEO of Zatik Security on Cybersecurity Challenges faced by SMBs

A candid discussion with Kymberlee Price, Founder and CEO of Zatik Security on overcoming cybersecurity challenges as a small or medium-sized business. Dive into the future of open source security strategy, key skillsets for future cybersecurity leaders, and more.
Read full Post
January 16, 2024

Cloud Control: Q&A with Joshua Marpet, BSides Global Council Member & Faculty Member at IANS

Dive into discussions on cloud security challenges, exciting new startup strategies, and the impact of emerging technologies with Joshua Marpet. Joshua's care spans from industry standards committees to being a driving force in the BSides movement.
Read full Post
January 9, 2024

Cloud Control: Q&A with Jonathan Jaffe, Lemonade CISO, on AI & Trends

We sit down with Jonathan Jaffe, Chief Information Security Officer (CISO) at Lemonade to talk AI trends, cybersecurity investments, the role of CISOs, and more.
Read full Post
August 15, 2025

Scaling Secure Deployments: Automating IaC Fixes Without Slowing DevOps Down

Discover how fix-left automation and deterministic AI deliver secure, compliant IaC deployments without slowing DevOps velocity.
Read full Post
August 4, 2025

Beyond Shift‑Left: The Rise of Automated Security Remediation in DevOps

Discover how to shift from detection to prevention using deterministic AI for fast, scalable DevOps security.
Read full Post
April 15, 2025

How Infrastructure as Code Security Shields Your Cloud Ecosystem from Silent Threats

Learn how to secure Infrastructure as Code by identifying overlooked risks, avoiding cross-cloud pitfalls, and embedding security across your DevOps pipeline.
Read full Post
March 21, 2025

What to Really Expect at RSA 2025: Wiz Drama, AI Disillusionment, and Swag for Days

RSA 2025 Predictions: Wiz’s multi-cloud cracks, GenAI’s security reckoning, and why deterministic automation will steal the show
Read full Post
March 17, 2025

Infrastructure as Code Security: A Comprehensive Guide

Secure your cloud deployments with this guide to Infrastructure as Code (IaC) security. Discover risks, actionable strategies, and tools like Gomboc.ai to automate compliance and mitigate vulnerabilitie
Read full Post
February 21, 2025

Change Management is Personal Resilience

Explores how embracing transformation, resilience, and adaptability can help professionals thrive in an AI-powered future.
Read full Post
November 5, 2024

Shifting Left to Infrastructure as Code Security in Healthcare‍

Adoption of cloud technologies and DevOps practices has become crucial in healthcare for improving efficiency, scalability, and patient care. As healthcare organizations embrace these digital transformations, Infrastructure as Code (IaC) has emerged as a critical component for managing and deploying
Read full Post
August 9, 2024

AWS CloudFormation vs. Terraform: A Rap Battle

AWS and Terraform had a rap battle last week and we got the footage.
Read full Post
July 31, 2024

Why and How AI Will Replace DevSecOps

Explore how AI is transforming DevSecOps, automating tasks for enhanced security and efficiency.
Read full Post
April 24, 2024

Q&A with SafetyDetectives

This interview explores the inception of Gomboc.AI, the core issues it aims to solve, and its distinct advantages over conventional security solutions in today’s rapidly evolving tech landscape.
Read full Post
February 29, 2024

The Hidden Costs of Fixing Cloud Infrastructure: A Strategic Guide for CISOs

Read full Post
February 20, 2024

Cloud Control: Q&A with Gal Shpantzer on Two Decades at the Helm of Security Outliers

Explore the future of cybersecurity with Gal Shpantzer, CEO of Security Outliers. Gain insights on emerging threats, incident response at scale, NIST standards, and the dynamic landscape of privacy and security.
Read full Post
February 13, 2024

Cloud Control: Q&A with Jonathan Cran, Google's Product and Engineering Lead, on Building Top-Tier Cybersecurity Products

Explore the latest cybersecurity trends and insights with Jonathan Cran, Google's Product and Engineering Lead. Gain valuable perspectives on GenAI, cloud security, and emerging technologies. Dive into the challenges of enterprise tech, AI adoption, and product leadership in cybersecurity.
Read full Post
February 6, 2024

Cloud Control: Q&A with Jennifer (JJ) Minella on Enhancing Security through Human-Centric Practices

Explore the cybersecurity landscape with Jennifer (JJ) Minella, Founder of Viszen Security. Gain insights into mindfulness-driven leadership, Zero Trust architecture, industry standards, and the future of AI in cybersecurity. Learn how to level up your security with human-centric solutions.
Read full Post
January 30, 2024

Cloud Control: Q&A with Kathy Wang, Former Chief Security Officer at Discord, on Raising the Bar on Security

Dive into advanced cloud security strategies with former CISO Kathy Wang. Explore building effective security teams, incident response best practices, and the latest technologies for effective cybersecurity. Prep yourself (and your team) for the fast-moving world of cybersecurity.
Read full Post
August 3, 2023

What is a Gomboc anyway?

Gomboc is a fascinating mathematical shape with unique properties. It is a mono-monostatic body, meaning it has just one stable and one unstable point of equilibrium. This article explores the intricate design, mathematical foundations, and applications of this geometric marvel.
Read full Post
August 4, 2023

Navigating AI in Cloud Security: Generative vs Deterministic Models for IaC Vulnerability Remediation

We asked ChatGPT to write us a blog post about the differences between deterministic and generative AI. Then we asked it to recommend us which model to use for IaC remediations. The results are not shocking.
Read full Post
Terraform logo

Terraform

Gomboc AI can use Terraform to configure and manage all your cloud infrastructure throughout its lifecycle. It can manage components of all levels like compute, storage, DNS entries, and SaaS.

CloudFormation Logo

CloudFormation

Gomboc AI can use CloudFormation to manage and secure an entire AWS infrastructure while accounting for the current services and environment. It makes sure not to push costly configurations that adds more work to DevOps.

Pulumi Logo

Pulumi

Gomboc AI uses Pulumi to provide precise and secure IaC through Pulumi's Infrastructure as Code Engine. It tries to use existing Pulumi packages from your team to follow best practices.

Puppet logo

Puppet

Gomboc AI can use Puppet to guarantee a desired secure state each time. It leverages Puppet's agent-server architecture to manage patching, protect secrets, and zero out misconfigurations.