OneClickComply

OneClickComply is a compliance automation platform that helps organizations prepare for and maintain security and quality certifications. It is operated by FAT32 Ltd, a company registered in England and Wales, and combines software with access to human auditors and a virtual CISO (chief information security officer) service.

Who it serves

The platform has packages for startups, scale-ups and enterprises, and names finance, professional services and security among the sectors it works with. A testimonial on its website comes from Durham Police.

Standards and frameworks

• ISO 27001 (information security) and ISO 9001 (quality)
• SOC 2, Cyber Essentials and Cyber Essentials Plus
• NIST CSF, CIS Controls v8, the NCSC Cyber Assessment Framework (CAF) and the NHS Data Security and Protection Toolkit (DSPT)

How it works

OneClickComply installs vulnerability agents on company devices and connects to other systems through integrations. Its OneClickFix feature remediates technical controls automatically, while other tools collect evidence, generate policies, maintain a risk register and answer security questionnaires. Higher tiers add automated penetration testing, vulnerability patch management, continuous monitoring, vendor risk management and a branded Trust Centre that customers can share with their own clients.

The service is sold in three plans (Core, Advanced and Complete), which differ by the number of frameworks, integrations and device agents included. The Advanced plan includes "Ask an Auditor" sessions and what the company calls an Audit Pass Guarantee, although the guarantee's terms are not published. Prices are not listed on the website, and prospective customers book a demo through the sales team.

What makes it distinct

OneClickComply covers several UK-specific frameworks, including Cyber Essentials, NCSC CAF and NHS DSPT, alongside international standards such as ISO 27001 and SOC 2. This makes it a fit for UK organizations that supply the public sector or the NHS and need to meet more than one framework at the same time. Its focus on automatically fixing technical controls, rather than only tracking them, is another point of difference.