Browser automations capture evidence from tools without an integration
Open-source compliance platform that uses AI agents to prepare companies for SOC 2, ISO 27001, HIPAA and GDPR audits
Prices in US dollars as Comp AI's pricing page showed them on 11 October 2026.
Vouchernaut may earn commission when you sign up through links on this page. It never changes what we say about a product or the order we list them in.
This is Comp AI, an open-source compliance platform based in Florida that uses AI to get software companies ready for SOC 2, ISO 27001, HIPAA and GDPR. It collects evidence, drafts policies and publishes a trust centre for customers.
Integrations with cloud, code and HR tools pull evidence on a schedule and auto-complete matching tasks. Custom automations can be written in plain English, such as checking that Dependabot is switched on.
An AI-driven browser signs in to tools with no API, including ones behind two-factor sign-in, and captures screenshots stamped with the requirement, source and time. Runs can be watched live and taken over by a person.
Policies are generated from onboarding answers about the company's stack and processes rather than a fixed template. An AI policy editor proposes changes as a tracked diff that can be applied or dismissed.
An open-source desktop agent for macOS, Windows and Linux checks disk encryption, antivirus, password length and screen lock every hour and reports failures to the Comp AI portal.
Read-only connections to AWS, Azure and Google Cloud run continuous security checks. On AWS, an optional second role lets a person apply a fix from Comp AI; nothing changes on a schedule.
A public trust portal shows only published policies and passing controls. Prospects can request access to documents, sign an NDA and receive a time-limited grant, with an audit trail for every step.
Uploaded questionnaires are answered from published policies and a knowledge base, and a Chrome extension drafts answers on vendor portals and in Google Sheets. Unsupported questions are flagged for review rather than guessed.
AI-assisted penetration tests run against a target URL and produce Markdown or PDF reports. A hosted MCP connector lets Claude, ChatGPT, Cursor and VS Code work with the compliance programme.
Works with
Contact sales
Quote given on a 20-minute call; 12-month minimum term
No public price list. Fees are in US dollars and exclude taxes, with a 12-month minimum commitment and annual auto-renewal (30 days' notice). The open-source code can be self-hosted without a licence fee. Prices in US dollars, from Comp AI's pricing page on 11 October 2026. Comp AI may charge VAT on top, and prices can change.
“Had considered using the platform, but after some research and discovering they use dodgy practices”
Comp AI helps a company prepare for a security audit. You choose the frameworks you need, such as SOC 2, ISO 27001, HIPAA or GDPR, and it drafts policies tailored to your business and maps them to the controls. An independent auditor still carries out the audit itself.
Comp AI connects to the tools you already run, including cloud providers and developer and workplace systems, and collects evidence automatically. A device agent checks staff laptops, and browser automations can capture evidence from tools that have no integration. It flags risks before they turn into audit findings, and the company says its experts answer quickly in a shared Slack channel.
Prospects often ask for proof of your security before they sign. Comp AI gives you a live trust centre to share your real compliance status upfront, which cuts down the back and forth of security questionnaires. It also offers tools to answer those questionnaires from your approved policies.
There is no public price list. Comp AI says the cost depends on your frameworks, team size, deadline and whether you want the audit, penetration testing or trust centre included, and gives an exact quote on a short call. Its terms set out the contract length and billing currency, and fees are in US dollars, so read them before you sign.
The core platform is open source and can be self-hosted, which suits teams that only need the software and can look after their own servers. That route doesn't include the managed audit, penetration tests or expert support that come with the paid service.
It is aimed at startups and growing software firms that need a security certificate to win larger customers, and scales up to enterprise programmes.
Free planAI code reviews on pull requests, in the editor and in the terminal, for GitHub, GitLab, Bitbucket and Azure DevOps
AI agents that test web, iOS and Android apps from plain-English steps and report pass or fail with video and screenshots
We don't currently list a confirmed discount code. That doesn't mean the store has no promotions; check its website for current prices.
It helps companies get ready for compliance audits such as SOC 2 and ISO 27001 by drafting policies, collecting evidence automatically and publishing a trust centre. An independent auditor still performs the audit.
Yes, the core platform is open source and can be self-hosted. Self-hosting doesn't include the managed audit, penetration testing or expert support.
Comp AI doesn't publish prices. It gives a quote on a short call, based on frameworks, company size, timeline and what else you want included.
SOC 2, ISO 27001, HIPAA and GDPR are its headline frameworks, and it also quotes for others including PCI DSS, NIST and FedRAMP.
Comp AI is open source and prices by quote, with a trust centre and expert support included. Compare quotes for the same scope to see which suits you.
Got a question about Comp AI?
