Gomboc AI wins the award DevOps Dozen 2025 for innovation
What is Gomboc AI and why does it matter in DevOps
Market DevOps and security cloud It's extremely crowded, but only a few products manage to fundamentally change the way teams work. Gomboc AI is one of these products. Winning the award DevOps Dozen 2025 – Best New DevOps tool represents not just image recognition, but a clear confirmation that their artificial intelligence-based approach answers a real need in the industry.
Gomboc AI positions itself as a autonomous infrastructure configuration and security platform cloud, with a strong focus on Infrastructure as Code (IAC)The tool uses AI to generate, correct and optimize configurations for:
– AWS, Azure and Google Cloud
– Terraform, CloudFormation and other IaC specific languages
– Security policies and compliance-oriented configurations
The combination of Generative AI si coded security policies allows teams DevOps, SecOps and Platform Engineering to deliver infrastructure faster, with fewer errors and risks.
Why the award? DevOps Dozen 2025 is relevant
Awards DevOps Boxes are among the most well-known distinctions in the ecosystem DevOpsCategory Best New DevOps tool highlights tools that have recently emerged, but which have a measurable impact on how teams deliver software.
The jury takes into account:
– the level of technical innovation
– adoption in the community and in enterprise companies
– contributing to automation and reducing human errors
– how the product integrates Dev, Sec and Ops into a unified flow
Winning this award shows that Gomboc AI is not just another security tool, but a central piece in the strategy DevSecOps for organizations oriented towards cloud.
The major problem that Gomboc AI solves
As infrastructures cloud become more complex, manual configuration and manual review of infrastructure code become a huge risk:
– IaC configurations written under time pressure
– lack of uniform standardization between teams
– drift between declarative configurations and production resources
– vulnerabilities accidentally introduced through seemingly minor changes
The consequences are well known: public data exposures, unnecessarily open ports, overly permissive IAM policies, increased costs due to over-sized or unchecked resources.
Gomboc AI attacks exactly this critical point, automating the analysis, generation and remediation of configurations, so that:
– errors should be caught before deployment
– teams can apply safety by design in IAC
– compliance policies should be transposed into code, not just PDF documents
How Gomboc AI works at a technical level
1. Intelligent analysis of existing configurations
The platform can import existing IaC code (Terraform, CloudFormation etc.) or can directly read the status of the infrastructure from cloudUsing an AI engine specialized in configurations and security, Gomboc:
– detects incorrect or incomplete configurations
– identify risk patterns (e.g. public S3 buckets, overly permissive IAM)
– maps resources to compliance frameworks (such as CIS, NIST, ISO, etc.)
The result: a clear picture of the health of the infrastructure from the perspective DevOps and security.
2. Generating secure IaC code using AI
One of Gomboc AI's differentiators is its ability to generate correct and policy-aligned IaC code, starting from natural language requirements. For example, an engineer may formulate a requirement like:
“I need a VPC in AWS, isolated for staging environment, with public and private subnets, NAT gateway and routing configured for secure outbound traffic.”
Gomboc AI can generate:
– complete Terraform files, structured into modules
– related security policies (SG, NACL, IAM)
– configurations optimized for cost and security
Instead of starting from scratch or copying old templates, the team can quickly iterate on modern, automatically validated configurations.
3. Auto-correction and assisted suggestions
When problems are identified, Gomboc does more than just display a report. The platform can:
– proposes configuration patches directly in the code
– generate pull requests in Git repositories
– create remediation plans step-by-step, prioritized by severity
Instead of a simple security scanner, Gomboc works as a co-pilot for IaC, helping teams move from detected problems to solved problems.
4. Alignment with DevSecOps and existing pipelines
Another reason why Gomboc AI attracted the jury's attention DevOps Dozen is how it integrates with:
– CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps)
– code management systems (GitHub, GitLab, Bitbucket)
- observability and ticketing platforms (Jira, ServiceNow, etc.)
Thus, verifying and remediating IaC configurations can become a standard step in the pipeline, similar to unit tests or code quality checks.
Concrete benefits for teams DevOps
Reducing infrastructure delivery time
By automatically generating configurations and patches, Gomboc:
– significantly reduces the time needed to create new environments
– allows teams to quickly experiment with alternative architectures
– eliminates much of the “routine work” of writing IaC from scratch
Instead of an engineer spending days manually configuring a complex infrastructure, he can validate and adjust what the AI produces in a matter of hours.
Reducing the risk of vulnerabilities
Gomboc AI automation helps to:
– elimination of “temporary” configurations that remain permanently in production
– ensuring that all resources are created with settings secure by default
– consistent implementation of security and compliance policies in all environments
Particularly for regulated organizations (financial, health, public sector), this capability is critical for passing audits and reducing the risk of breach.
Standardization at the organization level
Gomboc AI allows the definition of centralized policies configuration and security, which are then automatically translated into code. Thus:
– different teams use common templates and best practices
– a common language emerges between Dev, Sec and Ops
– onboarding of new engineers is much accelerated
Instead of each team "inventing" its own standards, the organization can build a catalog of compliant configurations, powered and validated by AI.
Why Gomboc AI is an innovation, not just another security tool
The market is full of security scanners, configuration analyzers, and compliance tools. What sets Gomboc AI apart is the combination of:
- Generative AI specialized in configurations cloud and IAC
– emphasis on automatic fix, not just on reporting
– natural integration into FLOW DevOps, not just in the security team
Instead of creating yet another “report that no one has time to read,” the platform offers:
– concrete technical context (what resource, in what file, with what risk)
– the proposed technical solution (updated IaC code, in concrete format)
– possibility to apply the patch automatically through the pipeline
Basically, Gomboc AI operationalizes the concept of DevSecOps, making security a natural and automated part of infrastructure delivery.
Impact of the award DevOps Dozen on the ecosystem
The fact that Gomboc AI won DevOps Dozen 2025 for Best New DevOps tool sends several important messages to the market:
– the future DevOps this AI-augmented, not just automated through scripts
– security can no longer be an “afterthought”, but must be integrated into code and pipelines
– Infrastructure as Code needs smart co-pilots, not just Git repositories
Moreover, the award validates the trend that teams DevOps to explicitly assume security responsibilities, and the tools used should be designed for cross-functional collaboration, not to create new silos.
How can organizations get started with Gomboc AI?
For companies looking to evaluate or adopt Gomboc AI, a typical journey could be:
- Pilot on a limited project – for example, a staging environment or a non-critical application
- Importing existing configurations – to quickly assess the current status and risks
- Defining a minimal set of policies – basic security and compliance rules transposed into code
- Integration into CI/CD – so that verification and remediation are automated in the pipeline
- Scaling at the organization level – as the benefits become visible and teams get used to the new flow
The key is the iterative approach: start small, learn, adjust policies, then expand the scope.
What does this award mean from a career perspective? DevOps
The emergence and recognition of tools like Gomboc AI is also changing the professional profile of engineers. DevOps, SRE and Platform Engineers. Several clear directions are emerging:
- More focus on architectural design and less on manual writing of repetitive configurations
- Integrating AI into the daily toolchain – co-pilots for code, for IaC and for security
- The need to understand security and compliance policies, not just automation aspects
Thus, DevOpsThe modern one becomes a mix between:
– classic technical skills (CI/CD, containers, cloud)
– deep understanding of security and risks
– the ability to work with AI platforms and validate their output
Conclusion: Why Gomboc AI is important for the future DevOps
Winning the prize DevOps Dozen 2025 for innovation places Gomboc AI at the center of the discussion about the future DevOps and DevSecOps. Instead of seeing AI as a replacement for engineers, Gomboc positions it as a strong ally in:
– reducing human errors in infrastructure
– accelerating the delivery of secure environments
– transforming security policies into easy-to-apply and verify code
As organizations massively adopt cloudand Infrastructure as Code, tools like Gomboc AI become essential to maintain a balance between speed, cost and security. And the prize DevOps Dozen is a clear signal that the entire community recognizes the value of this approach.
For professionals DevOps, the evolution of the ecosystem in the direction AI + security + automation it also means an opportunity for development: those who understand both the technical fundamentals and how to intelligently use these new tools will be the most sought after in the market.
Surely you understood what the news in 2026 is related to devopsIf you are interested in deepening your knowledge in the field, we invite you to explore our range of courses structured by roles in DevOps HUBWhether you're just starting out or want to brush up on your skills, we have a course for you.
