What Gomboc is
Gomboc promises a unique approach to IaC in that it goes beyond traditional regex based rules. The vendor site is www.gomboc.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Gomboc covers
Gomboc is in the catalog for these capabilities. Categories: IaC. Catalog tags: Nerdy and Open Source.
How to evaluate Gomboc in a security program
Use Gomboc as a stack candidate, not as diligence evidence. The oneNorma score for Gomboc is 4.3/10 (percentile 21). If the real gap is in IaC, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.gomboc.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.