DORA · GDPR · EU AI Act Compliance

Finally understand
your full mainframe stack

CobolIQ analyzes your entire mainframe & AS/400 portfolio (COBOL, RPG, JCL, CICS, DB2, VSAM, REXX, BMS) in seconds. Plain English reports, risk scores, DORA compliance documentation — without touching your production systems.

<2s
22,000 LOC analyzed
0
LLM hallucinations
100%
deterministic output

You have COBOL. Nobody knows what it does.

The developer who wrote it retired. You're afraid to touch it. And now DORA requires you to document it.

❌ IBM ADDI / Micro Focus EA

$250,000+ entry cost. 6-month onboarding. Vendor lock-in. Out of reach for most teams.

❌ Manual re-documentation

Months of work. High error risk. No audit trail. Your COBOL expert retired years ago.

✅ CobolIQ — the third option

Single binary. Runs on your server. Your code never leaves your infrastructure. Full DORA compliance output in under 2 seconds.

CobolIQ: Understand and modernize legacy code without guessing

One powerful engine, three distinct value propositions. We solve critical bottlenecks at every level of the market.

For Developers

Escape the manual grind

Stop wasting months manually parsing millions of lines of legacy code. Run CobolIQ in your terminal, grab a coffee, and get a 100% mapped system in minutes. Your time is too valuable for IT archaeology.

For Software Houses

Zero risk in Discovery

No more guessing and sinking margins during project estimates. CobolIQ turns weeks of tedious Discovery into a single day of profitable work. Generate hard audits and win contracts with mathematical certainty.

For Enterprise & Banks

Operational Continuity

A shortage of COBOL experts is not a death sentence. The Air-Gapped version of CobolIQ instantly secures core systems from paralysis, delivering 100% auditable DORA reports (Evidence-Based Readiness).

Core Architectural Moat

The Tri-Fold Reconstruction Engine

While superficial AI tools attempt to guess screens from PNG images, CobolIQ reconstructs 100% of your legacy system across three mathematical dimensions with zero hallucinations.

01. Full Execution Flow

Complete System Call Graphs

Deterministic mapping of every paragraph jump, dynamic ALTER statement, SUBPROGRAM call, and JCL step condition.

02. Bit-Perfect Data Lineage

Exact Data Contract Mapping

100% precise tracking of PIC data types, COMP-3 packed decimals, REDEFINES buffers, DB2 schemas, and VSAM datasets.

03. Keybinding & Transaction Navigation

CICS BMS Terminal Mapping

Complete state-machine mapping of 3270 screen navigation, PF1–PF24 keybindings, EIBAID handlers, and attribute byte validations.

Do you know what can be done with this????

Using CobolIQ's bit-perfect data contracts and execution flows, you can generate a 100% functional modern web application (Tauri / Rust / React) or cloud microservices in 10 seconds — backed by a zero-hallucination transaction logic guarantee.

Explore Live Demo (AWS CardDemo UI)

What you get in 2 seconds

Point CobolIQ at any legacy directory (COBOL, RPG, JCL, CICS, DB2, REXX, BMS). No cloud, no setup, no vendor account.

📄

Business Logic Narrative

Plain English explanations generated as Markdown (.md). No legacy knowledge needed. Drop it straight into Confluence.

🔴

Risk & Complexity Scoring

Per-paragraph risk score (0–100) delivered as CSV/JSON. Ranked lists of what to refactor first and why.

🗺

Architecture Call Graphs

Visual dependency maps (Mermaid.js). See exactly how programs, JCL, and DB2 interact. Renders natively in GitHub/GitLab.

📊

Data Table Extraction

Embedded rate and lookup tables extracted as clean JSON or SQL seeds. Stop manually rewriting 500-row logic tables.

🛡

Regulatory Audit Reports

DORA Art. 8 & 9, GDPR Art. 30 evidence. Automated PDF/MD reports tracing data lineage down to the exact source line.

🐍

Target Migration Skeletons

Ready-to-extend Python, Rust or C++ ports of your logic. Not AI-generated guesses — deterministic AST structure mapping.

Choose your workflow

Whether you are a solo developer, a consulting agency, or an air-gapped bank — we have a delivery method that fits your security and speed requirements.

☁️

Web SaaS

Upload your ZIP archive directly in the browser and get instant results. Perfect for quick Discovery phases and independent consultants.

Zero Setup
🖥️

Desktop App (Tauri)

A beautiful, self-contained desktop UI for Windows, Mac, and Linux. Analyzes code locally. Your IP never leaves your machine.

Local Privacy
💻

CLI Binary for Devs

The raw Rust executable. Integrate it into your CI/CD pipelines, automate batch scanning, or run it on air-gapped partitions.

Max Automation
🐳

Docker Container

Air-gapped ready container for enterprise infrastructure. Deploy instantly on your internal Kubernetes or VPS without external dependencies.

Enterprise Ready
⚠ DORA Deadline Passed

DORA entered into force January 17, 2025

EBA and ESMA supervisors are actively inspecting financial institutions for ICT risk documentation. If you have COBOL in production and cannot document what it does — you may already be non-compliant.

Article 8
ICT asset inventory — CobolIQ generates it automatically
Article 9
Risk classification per system — risk scores with dominant factors
GDPR Art. 30
Data lineage for personal data — traced to source line
Open Source Scans

Download Sample Reports

See exactly what CobolIQ generates by downloading our full compliance and intelligence reports for public COBOL systems.

Project Name Description Action
OP
VA OPPS (Veterans Affairs)
Open Source Outpatient Pharmacy Prescription System Download ZIP ↓

Pricing

Less than 2 days of one COBOL developer's salary.

Demo
Free
Self-hosted binary
  • ✓ Up to 3 programs
  • ✓ Runs locally — code stays with you
  • ✓ Real output, watermarked
  • ✗ Not for regulatory use
Request Demo
New
Web SaaS
$50/weekly
Self-service Cloud
  • ✓ Instant online analysis
  • ✓ Unlimited diagnostic scans
  • ✓ Downloadable JSON/CSV/MD
  • ✓ DORA compliance audits
  • *Agency white-label available ($299/mo)
Start Free Trial
Standard License
$500/mo
30-day timed binary
  • ✓ Unlimited programs & portfolio size
  • ✓ All formats: MD, JSON, Python skeleton
  • ✓ DORA / GDPR compliance reports
  • ✓ Ready for regulatory submission
  • ✓ Email support
Purchase License
Audit Report
$2,000 once
We run the analysis for you
  • ✓ Send us your COBOL (NDA available)
  • ✓ Full portfolio risk report (PDF)
  • ✓ DORA Art. 8 + Art. 9 documentation
  • ✓ Modernization recommendations
  • ✓ Delivery: 3–5 business days
Request Audit
Enterprise

50+ programs, CI/CD integration, custom output formats, ongoing modernization consulting. Custom pricing.

Contact Us →

Real Output — CMS FQHC Pricer

Below is actual CobolIQ output from a real CMS (Centers for Medicare & Medicaid Services) mainframe COBOL program — FQHCCAL, a Federally Qualified Health Center payment calculator.

Executive Summary (ISN)
Program FQHCCAL orchestrates a 3-step
business flow consuming 1 input record
(INPUT-RECORD) and producing 1 output
record (OUTPUT-RECORD).

Emits 21 distinct return-code values
across 28 assignment sites, driven by
15 state-machine flag groups.

Depends on 4 external copybooks:
COPYGAF, COPYBASE, COPYADD, COPYGFTF.
Portfolio Risk Score
Average risk 🟢 15 / 100 LOW
Worst paragraph 🔴 95 / 100 CRITICAL
2
Critical
1
High
1
Medium
22
Low
Extracted Business Rules (88-level enums)
HL-HCPCS — HCPCS procedure codes:
  MEDICAL-VISIT    = G0466
  MENTAL-VISIT     = G0469
  MEDICAL-NEW      = G0466
  MEDICAL-ESTAB    = G0467
  MEDICAL-IPPE-AWV = G0468
  MENTAL-HEALTH-NEW   = G0469
  MENTAL-HEALTH-ESTAB = G0470

HL-PYMT-IND — Payment indicators:
  TELEHEALTH       = 2
  PAID-LINE        = 10
  NOT-PAID         = 11
  PAID-WITH-ADD-ON = 13
  PAID-GFTF        = 14
Extracted Data Schema → SQL-ready
W-DAY-SUM-ENTRY (OCCURS 450 TIMES)
  W-DS-DATE          INTEGER
  W-DS-BASE-PMT-RATE DECIMAL(9,2)
  W-DS-GAF           DECIMAL(9,2)
  W-DS-ADD-ON-PMT-RATE DECIMAL(9,2)
  W-DS-TOT-MEDICAL-CHRGS DECIMAL(9,2)
  W-DS-TOT-MENTAL-CHRGS  DECIMAL(9,2)
  W-DS-TOT-MOD59-CHRGS   DECIMAL(9,2)
  W-DS-MEDICAL-PAID-LINE-FLAG VARCHAR
  W-DS-MENTAL-PAID-LINE-FLAG  VARCHAR
  W-DS-MOD59-PAID-LINE-FLAG   VARCHAR

529-row CMS rate tables extracted bit-perfectly. Zero LLM — same input always produces same output.

Technical Facts

Rust
Single binary, no JVM, no Docker
<100ms
1,700 LOC analyzed
Full Stack
COBOL, RPG, JCL, DB2, CICS, REXX, BMS, VSAM
Zero LLM
Deterministic — auditors accept it

Free Pilot Audit

Not sure if CobolIQ works on your COBOL dialect? Send us one program (NDA on request). We return the full analysis report within 48 hours — no cost, no commitment.

contact@coboliq.com

NDA available on request. Your code never leaves your infrastructure with the self-hosted option.