Gomboc AI Launches Open Remediation Language to Scale Deterministic Cloud and Code Fixes

New updates have been reported about Gomboc AI.

Gomboc AI has introduced the Open Remediation Language (ORL), a domain-specific language that extends the company’s deterministic remediation platform from Infrastructure-as-Code into broader cloud configuration, application code, and software dependencies. By turning security and compliance policies into precise, repeatable code transformations, ORL is designed to provide policy-aligned fixes that executives can trust in production environments.

The move positions Gomboc AI to capture growing enterprise demand for safe automation as generative and agentic AI tools increasingly propose changes to live systems. ORL underpins Gomboc’s execution layer by ensuring that the same input consistently produces the same change set, enabling predictable, auditable remediation at scale across more than 35 programming languages.

Unlike probabilistic AI outputs or brittle pattern matching, ORL relies on explicit rule logic and controlled execution boundaries to detect policy violations with syntax-aware precision and generate merge-ready pull requests that integrate into existing Git and CI/CD workflows. This architecture is meant to mitigate the operational risk executives see in AI-driven remediation, such as incomplete fixes, inconsistent behavior, and weak policy alignment.

Gomboc AI’s CTO and Co-Founder, Matthew Sweeney, framed the strategic rationale around trust and control, noting that AI suggestions are not sufficient if organizations cannot guarantee safe execution in production. ORL effectively separates reasoning, where large language models may assist, from enforcement, where deterministic rules govern what changes are actually applied across repositories.

A recent Log4Shell case study illustrates ORL’s scalability beyond IaC, with Gomboc AI implementing over 20 rules in under 24 hours to handle multiple Java dependency management patterns, version upgrades, and mitigation steps. The same remediation engine that previously focused on IaC was able to address dependency and configuration risk without sacrificing repeatability or policy alignment, suggesting a broader total addressable market across cloud security and software supply chain risk.

For executives, the business impact includes potential reductions in manual remediation costs, faster response to critical vulnerabilities, and improved compliance assurance across diverse codebases. ORL’s deterministic approach may also simplify audits and regulatory reporting by making every automated change traceable and explainable.

ORL is available immediately as part of the Gomboc AI platform, with a Community Edition lowering the barrier to entry for organizations that want to test deterministic remediation within their current development workflows. This launch reinforces Gomboc AI’s positioning as a leader in AI Code Security Assistants, focused on delivering production-safe, merge-ready fixes at scale rather than probabilistic suggestions.