Sold by: Yuma IT
Deployed on AWS
Compliance on Demand is a self-hosted security posture management platform for AWS, Azure, GCP and supported SaaS services. It identifies misconfigurations and helps teams track compliance against CIS, NIST, ISO 27001, SOC 2, Essential Eight and ISM.
Overview
Compliance on Demand is a self-hosted, single-tenant security posture management platform for organisations that need to manage cloud and SaaS security, compliance evidence, risk and vendor oversight in one system. It supports security and compliance teams, managed service providers and other organisations working across AWS, Azure, GCP, Microsoft 365, Google Workspace, identity platforms and source control.
The platform identifies security misconfigurations, tracks findings and maps security posture against frameworks including CIS Benchmarks, NIST, ISO 27001, SOC 2, Essential Eight, ISM, the Privacy Act and APRA CPS 234. Teams can schedule recurring assessments, centralise risks and evidence, manage vendors, maintain policies and procedures, monitor selected public vendor-security signals and prepare security or compliance reports. Murray, the included AI security and risk assistant, can use AWS Bedrock or a locally hosted Ollama deployment to explain findings, summarise risk and assist with reports, policies, procedures and cyber incident playbooks.
Compliance on Demand runs on infrastructure controlled by the customer and can be deployed on Amazon EC2 or Amazon ECS. The supplied Docker Compose architecture uses PostgreSQL and Redis, with one deployment and database per client organisation. This model gives customers control over deployment location, security data, backups and data residency while supporting cloud and SaaS security reviews from a central operational workspace.
Highlights
- Self-hosted, single-tenant security posture management that keeps all data on your infrastructure. Ships as a Docker Compose stack with PostgreSQL and Redis. One deployment per client organisation enforced by a singleton workspace constraint, ensuring data never leaks between tenants. No SaaS dependency means full data sovereignty and control over your security scanning environment.
- Scan AWS, Azure, and GCP for security misconfigurations alongside SaaS assessments for Microsoft 365, Intune, Google Workspace, GitHub, Okta, Auth0, and Clerk. Track compliance against CIS, NIST, ISO 27001, SOC 2, Essential Eight, ISM, Privacy Act, and APRA CPS 234. Configure automated scan schedules directly from the UI without manual scripting or external orchestration tools.
- Generate security policies, reports, and cyber incident playbooks with AI assistance through local Ollama or AWS Bedrock. Monitor vendor risk with built-in intelligence that watches CISA KEV, SEC EDGAR Form 8-K filings, and vendor statuspage.io feeds for incidents - no API keys required. Import DOCX/PDF documents and export PDF reports with ISO 27001 ISMS readiness tracking and downloadable onboarding artifacts.
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Initial
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on a fixed subscription cost. You pay the same amount each billing period for unlimited usage of the product. Pricing is prorated, so you're only charged for the number of days you've been subscribed. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
- Monthly subscription
- $0.001/month
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Initial
Supported services: Learn more
- Amazon ECS
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Initial
Additional details
Usage instructions
Use this github repo to find instructions on how to deploy - https://github.com/yumaitau/COD-aws-deploy
Support
Vendor support
Support is available through https://complianceondemand.com.au . The product team provides installation, configuration, update and troubleshooting assistance for self-hosted Compliance on Demand deployments.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Assess your AWS security posture and automate remediation - in a single, expert-led engagement. Cloud On Demand identifies critical vulnerabilities and deploys automated responses so your team resolves threats in minutes, not days.
Automated multi-cloud security assessment mapping CIS Benchmark findings to OSFI B-13, NIST CSF, and industry regulatory frameworks with bilingual EN/FR executive reports.
Cloud23, an AWS Advanced Consulting Partner, offers a complimentary hour with certified Security & Compliance experts for SA On-Demand Compliance.
Over 80% of our clients, spanning diverse sectors, trust us for proactive protection and security tooling to meet PCI, HIPAA, HITRUST, ISO, SOC, and GDPR compliance, ensuring secure and scalable cloud environments.
Chef capabilities are available as cloud-based services, providing customers with the same powerful automation capabilities with the added benefit of reduced infrastructure overhead and faster time to value.
Our Quickstart Service for Prisma Cloud CSPM is a catered offering designed to help speed up your adoption and integration time with Prisma Cloud CSPM. This Service will include project management, planning, configuration, validation, documentation, and knowledge transfer. Our expert consultants will remotely configure and integrate with your cloud environment.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.