Skip to main content
Coming soonComing soon
DocSwarm complycomply

DocSwarm Comply is in early concept: a capability to map code and engineering practice to the UK Software Security Code of Practice, guide remediation, and produce audit ready evidence with repositories and processing on infrastructure you control. Detailed positioning is shared privately when appropriate.

  • ·SSCoP native posture
  • ·Local analysis
Get in touch

Roadmaps and briefing materials are shared privately when appropriate. Use Get in touch or your Falconers contact.

Comply pipeline

How Comply works

  1. 01

    Connect

    Point Comply at your software repository and CI context. Everything runs locally on your own infrastructure and no source code leaves your network.

  2. 02

    Analyse

    Deterministic checks run against your codebase, dependency manifests, pipeline configuration, and development practices.

  3. 03

    Map

    Findings are mapped to the 14 principles of the UK Software Security Code of Practice, covering governance, secure development, third-party components, and vulnerability management.

  4. 04

    Remediate

    Prioritised gaps come with implementation-oriented guidance. Teams close issues without needing a permanent consultancy engagement.

  5. 05

    Evidence

    An audit ready evidence pack is generated for DSIT and NCSC assurance conversations, customer security questionnaires, and Innovate UK submissions.