Now with AI + ML anomaly reasoning

SoD + Logs + AI.
One Platform.

Detect Separation of Duties violations, audit every user action in real-time, and let AI catch the anomalies your rules miss.

30-day free trial · No credit card required · Full access from day one

10 min
to first violation
60+
connectors
SOC 2
in progress

Three pillars. One platform.

Stop stitching together five tools. ComplianceScout unifies SoD detection, log auditing, and AI-powered anomaly reasoning under one roof.

Separation of Duties

Detect role conflicts across Okta, AD, AWS, Postgres, and your ERP. 15 starter rules ship with every account, mapped to SOC 2, ISO 27001, HIPAA, and PCI.

Real-time Audit Log

Every user action, every role assignment, every config change — captured with chain-of-custody integrity. Export evidence bundles for auditors with one click.

AI Anomaly Reasoning

AI catches the anomalies your rules miss. Plain-English explanations of every violation, suggested remediations, and rollback in 24 hours.

Start free. Scale on demand.

Every new account gets 30 days of full-platform access. When your trial ends, our team walks you through provisioning a production account.

Free Trial

30 days

Full access to every feature from day one. No credit card required.

All 60+ connectors
Unlimited SoD rule checks
AI anomaly detection
POAM & SSP generation
Evidence ledger
All compliance frameworks
RMF pre-adjudication
Start free trial →

Enterprise

Custom

Fully provisioned account with dedicated onboarding and SLA guarantees.

Everything in Trial, plus:
Dedicated onboarding engineer
Custom SoD rule library
Unlimited identities & tenants
SSO / SCIM provisioning
Priority SLA & support
Custom data retention
Contact sales →

Connect in minutes, not months.

No agents. No code changes. Connect your identity providers and SaaS tools via OAuth or API key and get violation detection running within minutes.

Okta
Azure AD / Entra ID
Google Workspace
AWS IAM
GitHub
GitLab
Microsoft Teams
Slack
CrowdStrike
SentinelOne
Rapid7
Qualys
Tenable
Splunk
Datadog
PagerDuty
HashiCorp Vault
AWS Secrets Manager
Azure Key Vault
Jamf Pro
ServiceNow
Salesforce
Workday
BambooHR
Jira
Confluence
Zoom
Snowflake

OAuth & API key auth

Connect with a single click via OAuth or paste an API key. No network changes, no firewall rules, no agents.

Near-instant detection

Sub-second on connectors with native event push; 60-second polling on the rest. Detectors fire on every new event, not on a daily batch.

Push to Jira, Slack & Splunk

Route violations and alerts to the tools your team already uses. Configure routing rules per severity level.

Get started in under 10 minutes.

No professional services required. Follow these four steps and you'll have your first violations detected before your next coffee break.

01

Create your account

Sign up for a free 30-day trial. Your tenant is provisioned instantly — no waiting for a sales call.

02

Connect an identity provider

Authorize ComplianceScout to read your Okta, Azure AD, or Google Workspace directory. Read-only access, no agents.

03

Review your SoD rules

15 pre-built rules ship with every account, mapped to SOC 2, ISO 27001, HIPAA, and PCI. Add custom rules in minutes.

04

Start remediating

AI explains every violation in plain English and proposes a remediation. Approve it and ComplianceScout executes the fix immediately via the vendor's admin API. If the vendor rejects the change, you'll see the failure on the violation page.

Frequently asked questions

What happens when the trial ends?
Your account is preserved. You'll see a banner prompting you to contact our sales team to set up a production account. No data is deleted.
Do you store my user data?
ComplianceScout reads identity and role data from your connected systems to detect violations. We never store passwords or sensitive personal data beyond what's needed for detection.
Which compliance frameworks do you support?
SOC 2 Type II, ISO 27001, HIPAA, GDPR, PCI DSS, and NIST SP 800-53 (RMF) out of the box. Custom framework mappings available on Enterprise.
Is the platform SOC 2 certified?
SOC 2 Type II audit is in progress. We operate on enterprise infrastructure (Vercel + Neon + Render) with encryption at rest and in transit, RBAC, MFA enforcement, and an immutable evidence ledger.