---
title: Quickstart
description: Install ComplyForm and run your first compliance scan in 30 seconds.
---

import { Tabs, TabItem, Aside } from '@astrojs/starlight/components';

## 1. Install

<Tabs>
  <TabItem label="uv (recommended)">
    ```bash
    uv tool install complyform
    ```
  </TabItem>
  <TabItem label="Homebrew">
    ```bash
    brew install complyform/tap/complyform
    ```
  </TabItem>
</Tabs>

Verify the install:

```bash
complyform --version
```

## 2. Scan

Discover resources from your Terraform state file:

```bash
complyform scan --state=terraform.tfstate
```

```
Scanning terraform.tfstate...
Found 42 resources across 3 services (Cloud SQL, GCS, Cloud Run)
Scan complete — results cached.
```

## 3. Assess

Map discovered resources against a compliance framework:

```bash
complyform assess --frameworks=soc2
```

```
Assessing 42 resources against SOC 2 (149 controls)...

CC6.1  Logical Access Controls     FAIL  google_sql_database_instance.production
CC6.7  Data Encryption             PASS  google_storage_bucket.artifacts
CC7.2  System Monitoring           FAIL  google_cloud_run_service.api
...

Result: 38/149 controls passing — 26% compliant
```

## 4. Remediate

Generate Terraform patches for failing controls:

```bash
complyform remediate --frameworks=soc2
```

```
Generating patches for 111 failing controls...

  patches/google_sql_database_instance_production.tf  (CC6.1, CC6.6)
  patches/google_cloud_run_service_api.tf             (CC7.2, CC7.5)
  patches/google_storage_bucket_artifacts.tf          (CC6.7)
...

Wrote 23 patch files to ./patches/
```

## 5. Validate

Apply the patches and confirm compliance:

```bash
complyform validate
```

```
Validating patched state against SOC 2...

Result: 149/149 controls passing — 100% compliant
```

<Aside type="tip">
Run `complyform validate --fix` to auto-apply safe remediations for controls marked `auto_fix_safe`.
</Aside>

## Next steps

- [CLI Reference](/cli-reference/) — every command, flag, and option
- [Brownfield Assessment Guide](/guides/brownfield/) — deep-dive on scanning existing infrastructure
- [Frameworks](/frameworks/) — all 53 supported compliance frameworks
