Proactive security configuration audit
Comply reads your Microsoft 365, Google Workspace and Azure configuration the way an attacker would, before an incident forces the question. Every gap it finds comes with the evidence, the fix, and the framework it maps to: SOC 2, HIPAA, CMMC, CIS, FERPA and GLBA. Supported checks only, with collection gaps kept visible. A Z7 engineer walks it with you.
Hover a setting. The sweep reads a tenant, lights each gap and maps it to the framework an auditor will ask about.
Start here
Set your scope and check out right here. Your scan follows.
Tenant, framework, organization, authority.
2 minutesStripe checkout, then pick your 60 minute engineer session from the live calendar.
3 minutesSign in as a tenant admin and grant read-only consent. The permissions are listed before you click.
2 minutesThe scan runs and the readiness dashboard fills in. Your engineer walks it with you, plus the outside view from DeepRecon.
Scan 15 to 30 minutes · session 60A misconfiguration costs minutes to fix when you find it first. It costs months to explain when someone else does. Comply is the proactive version of the audit every incident report ends with.
See which checked settings need attention and why they matter, with collection gaps kept visible.
Follow the remediation steps in your own Microsoft 365, Google Workspace, or Azure platform.
Walk through your results and agree on the next steps. Warden AI-identity scanning is included.
The readiness report
See what was checked, what needs attention, and what to do next. Your results live in the dashboard, with an interactive report and a PDF to share.
Findings mapped to your selected framework, with the supporting evidence and the status of each checked control.
A practical view of the gaps, their severity, and the recommended steps for your team.
Understand the connected sources and collection gaps. Missing evidence stays visible for review.
Review the interactive report, add reviewer commentary, and download a PDF for your stakeholders.
Includes a 60 minute engineer session to walk through the results. Readiness support does not certify your organization.
Sign in to your reportsEvery supported finding carries the framework it affects and the evidence that proves it. Unsupported or manual controls stay visible for review, never hidden behind a score.
Trust Services Criteria, security and availability.
Security Rule technical and administrative safeguards.
Access control, identification, audit and accountability.
Microsoft 365 Foundations Benchmark 7.0.0, supported subset.
Student record access and disclosure controls.
Safeguards Rule for higher education and finance.
What the authorize screen shows. Nothing is hidden behind the consent prompt.
Exact scopes come from the live application registration at build time; these are the current read-only families, not a new grant.
No tiers, no feature gates. Comply is one subscription with everything in it, priced per tenant. A Microsoft tenant covers Microsoft 365 and Azure together. A Google Workspace tenant is its own. Commit for a year or three and two months come off every year. Everything stays monthly if you want it to.
$999 a month, no commitment.
$10,000 a year, paid upfront. Two months off.
$833.33 a month. The same two months off every year, paid monthly, $10,000 a year locked for the term. No automatic renewal.
+$250 a month per additional tenant. +$249 a month per additional DeepRecon domain. Annual tenant add-ons paid upfront at $3,000 each.
Subscription checkout opens soon. Until then an engineer sets it up with you, at the prices above.
The audit above. One tenant, your chosen framework, every supported gap with evidence and the fix, Warden included, and an hour with a Z7 engineer. No subscription, no DeepRecon benefit.
Start the readiness auditOne plan, every feature. $499 for a one-time assessment. +$249 a month per additional domain. Included for your primary domain with any Comply subscription.
Open DeepReconReadiness support does not certify your organization or guarantee every risk is identified. Purchasing never starts collection: you approve the exact tenant, scope and cadence first.
The outside view
Your engineer session includes a DeepRecon look at the public attack surface.
Z7-Claw™ Comply provides compliance readiness support. It does not certify an organization. Z7 Solutions LLC is not a C3PAO, QPA, or CPA firm; certification decisions remain with your accrediting organization.
