Review of COMET, Risk Intelligence Software Vendor

Last updated: April, 2026

Go back to Market Research

COMET (supply chain score 4.7/10) is a credible risk-intelligence and incident-investigation software vendor with a genuinely supply-chain-adjacent module for supplier assurance, but it is not a supply chain planning or optimization company. The current public record supports a coherent SaaS suite for incident management, root cause analysis, audits, inspections, supplier-risk assessment, and AI-assisted HSE analytics, plus a real methodology around investigations and human factors. Public evidence does not support any stronger claim that COMET performs forecasting, replenishment planning, inventory optimization, or mathematically rich flow decisions. The correct reading is therefore narrow but not dismissive: COMET is a risk and assurance software vendor whose supply chain footprint is about supplier governance and resilience, not supply chain optimization.

COMET overview

Supply chain score

• Supply chain depth: 4.0/10
• Decision and optimization substance: 3.8/10
• Product and architecture integrity: 5.8/10
• Technical transparency: 5.0/10
• Vendor seriousness: 5.0/10
• Overall score: 4.7/10 (provisional, simple average)

COMET is stronger than many peers on methodological coherence and weaker than nearly all of them on core supply chain scope. The software appears real, the investigation and assurance layer appears mature, and the AI story is plausible though only lightly exposed. The issue is category mismatch rather than product emptiness: this is a risk-and-investigation suite that partly touches supplier assurance, not a planning engine for flows of goods.

COMET vs Lokad

COMET and Lokad sit in different categories despite both touching operational risk.

COMET is a risk-intelligence suite. Its public modules cover incident reporting, investigation, root cause analysis, audits, inspections, supplier assurance, resilience, and HSE analytics. The center of gravity is learning from failures, surfacing patterns in incidents and audits, and managing supplier-related risk exposure. (1, 2, 3, 4, 5, 6)

Lokad is a supply chain decision platform. Its center of gravity is forecasting and optimizing supply chain decisions such as purchases, allocations, production, or pricing under uncertainty. So even where both products may be present in the same enterprise, they would normally serve very different layers of the operating model.

This is important because COMET should not be evaluated as a poor forecasting tool. It is not trying to be one. The right question is whether its supplier-risk and assurance capabilities are meaningful enough to count as supply chain software at all. The answer is yes, but only in a narrow governance-and-risk sense rather than in a decision-optimization sense.

Corporate history, ownership, funding, and M&A trail

COMET’s current corporate identity is the result of a merger and later rebranding.

The underlying business was formed when STC Global and Insiso merged in 2021 to create STC INSISO. That merger combined software, investigation methodology, and consulting-oriented business improvement capabilities into one entity. Public reporting from 2021 to 2023 shows a growing but still compact software-and-services company with traction in rail, water, ports, and energy. (7, 8, 9, 10, 11)

In February 2023 the company secured £2 million from BGF to accelerate rollout of the COMET software platform. In May 2024 the group rebranded around COMET itself, shifting from STC INSISO as the primary name to COMET as the primary software-led brand. This sequence is revealing: the business is clearly trying to become a more software-centric company rather than staying only a methodology-and-services shop. (12, 13, 14, 15)

The company remains small to mid-sized by enterprise-software standards, and the public record still suggests a specialist vendor rather than a scaled platform incumbent.

Product perimeter: what the vendor actually sells

The product perimeter is broad in risk management and narrow in supply chain.

COMET currently presents a family of modules spanning Incident Management, Investigation and RCA, Audits and Inspections, Supply Chain, AI Data Analytics, Resilience, and newer AI Assistant or Companion layers. The website now emphasizes an integrated risk-intelligence platform more strongly than the older STC INSISO messaging did. (1, 4, 5, 16, 17, 18, 19, 20)

The module relevant to this peer review is COMET Supply Chain. Public product pages show that this module is about supplier onboarding, configurable risk scoring, document and certification tracking, supplier review, and action management. That is a legitimate supply-chain-adjacent workflow, but it is not a planning product in the conventional meaning of the term. (6, 21, 22)

The AI product perimeter has also expanded. COMET Signals remains the main analytics layer for scanning structured and unstructured HSEQ data, while COMET AI Assistant and COMET Companion now push the company further into agent-like assistance for investigation workflows. Those additions make the suite more modern, but they do not fundamentally change its category. (5, 17, 18, 23, 24)

Technical transparency

Technical transparency is decent on SaaS operations and weak on AI internals.

COMET publishes more than many peers on deployment and governance. The UK G-Cloud listing documents Azure hosting, browser access, PaaS deployment, API integration, CSV import, flat-file export, 2FA, audit logs, ISO 27001, Cyber Essentials Plus, and a 99.9% uptime target. That is enough to establish a serious enterprise SaaS posture. (25, 26, 27)

The weak point is the AI stack. COMET Signals and the newer AI Assistant are described in terms of outcomes, pattern recognition, recommendations, and time savings, but not in terms of model classes, validation procedures, false-positive rates, or operational limits. So the suite is transparent enough to assess as software infrastructure, but not transparent enough to strongly credit its AI claims beyond plausibility.

Product and architecture integrity

The architecture looks coherent and fit for purpose.

COMET appears to be one modular SaaS suite rather than a random product collage. Incident capture, investigations, audits, supplier assurance, analytics, and AI assistance all reasonably fit under one risk-intelligence umbrella. The integration with external EHS systems such as Intelex and Synergi Life also supports the interpretation that COMET is an overlay and specialization layer, not a replacement for every operational system. (25, 26, 28, 29)

The architecture is not novel, but that is not a problem here. Azure-hosted multi-tenant SaaS with role-based access, APIs, and BI dashboards is an appropriate delivery model for this kind of product. The main caveat is that the software seems heavily dependent on the methodology and coded taxonomies that sit above the technical substrate. That makes the product coherent, but also somewhat methodology-bound.

Supply chain depth

Supply chain depth is limited and should be scored conservatively.

COMET does have a real supply-chain-relevant module. Supplier risk scoring, supplier audits, evidence capture, corrective actions, and ongoing assurance are meaningful parts of supply chain governance, especially in high-risk and highly regulated industries. The module is therefore not fake. (6, 21, 22, 30)

The limitation is obvious: this is not demand planning, inventory optimization, lead-time control, sourcing optimization in the OR sense, or network design. It is supplier risk and assurance management. So COMET deserves recognition as supply-chain-adjacent software, but not as a deep supply chain platform.

Decision and optimization substance

Decision substance exists, but it is about risk handling rather than flow optimization.

COMET clearly helps users make decisions about incident response, corrective actions, audit priorities, and supplier-risk escalation. The software is not just passive reporting. It produces classifications, analysis, alerts, and governance actions that affect operations. (4, 5, 6, 16, 17)

What it does not publicly demonstrate is mathematically rich supply chain optimization. Even its predictive language is centered on HSE text analytics and incident pattern detection rather than on numerical planning decisions. That means the score for this dimension should remain low from a supply chain standpoint even if the product is useful in its own domain.

Vendor seriousness

COMET looks serious as a niche enterprise software company.

The company has meaningful credentials: a named funding round, public-sector procurement visibility through G-Cloud, recognized security certifications, a visible methodology lineage, and multiple named customers in safety-critical industries. These are real credibility signals. (12, 13, 25, 31, 32)

The restraint comes from scale and AI proof. COMET is still a relatively small specialist vendor, and its AI claims are not documented deeply enough to justify unusually high confidence. So the seriousness score should be positive but measured.

Supply chain score

The score below is provisional and uses a simple average across the five dimensions.

Supply chain depth: 4.0/10

Sub-scores:

• Economic framing: COMET clearly addresses costly failures, compliance issues, supplier-risk exposure, and operational disruption. Those are legitimate economic concerns, and they matter for real supply chains. The score remains modest because the software is not directly engaged with the core economics of inventory, service, replenishment, or network flow decisions. 4/10
• Decision end-state: The platform does produce decisions and actions in the domains of audits, investigations, and supplier risk. This is a real strength within its niche. The score is capped because those actions are governance and assurance actions rather than core supply chain planning decisions. 4/10
• Conceptual sharpness on supply chain: COMET is conceptually clear about supplier assurance and risk scoring, which is a positive. However, the wider product identity is risk intelligence rather than supply chain, so the supply chain framing remains secondary and narrow. 4/10
• Freedom from obsolete doctrinal centerpieces: COMET is not trapped in old APS or S&OP vocabulary, which is directionally positive. It still relies heavily on methodology-driven governance language, but that is appropriate to its domain and not especially obsolete. That yields a moderate score rather than a low one. 4/10
• Robustness against KPI theater: The combination of investigation, audits, and coded taxonomy should help reduce shallow KPI reporting by pushing users toward root causes. That is a meaningful strength relative to dashboard-only software. The public evidence still does not deeply explain how the software counters gaming in supplier-assurance workflows, so the score remains moderate. 4/10

Dimension score: Arithmetic average of the five sub-scores above = 4.0/10.

COMET earns its supply chain relevance through supplier-risk governance, not through planning or optimization. That is real, but narrow. (6, 16, 21, 22)

Decision and optimization substance: 3.8/10

Sub-scores:

• Probabilistic modeling depth: Public evidence for explicit probabilistic modeling is thin. The AI analytics layer may use modern NLP and pattern detection, but the company does not expose anything like a probability-first planning framework. 3/10
• Distinctive optimization or ML substance: COMET Signals and the newer AI Assistant indicate real ML-assisted functionality. However, the public record does not support a strong claim of technically distinctive optimization or advanced ML beyond plausible applied NLP. 4/10
• Real-world constraint handling: The software clearly handles non-trivial operational constraints in audits, investigations, supplier evidence collection, and risk prioritization. That is real-world complexity, even if not supply-chain-optimization complexity. 5/10
• Decision production versus decision support: COMET is more than a dashboard product because it drives actions and workflows. Still, it is primarily a decision-support and governance platform, not an autonomous decision engine. 4/10
• Resilience under real operational complexity: Named deployments in rail, ports, utilities, and energy suggest the software functions in serious environments. The score remains moderate because public technical details on scalability and model quality remain limited. 3/10

Dimension score: Arithmetic average of the five sub-scores above = 3.8/10.

COMET has real applied intelligence for its category. From a supply chain optimization lens, however, the substance remains modest. (5, 17, 18, 25)

Product and architecture integrity: 5.8/10

Sub-scores:

• Architectural coherence: The suite is coherent: investigations, audits, supplier assurance, and analytics all fit together naturally. There is no sign of a product portfolio stitched together without logic. That coherence deserves a strong score. 7/10
• System-boundary clarity: The public documentation and G-Cloud listing make it reasonably clear what COMET does, how it integrates, and where it sits relative to EHS systems. That clarity is better than average for a niche SaaS vendor. 7/10
• Security seriousness: ISO 27001, Cyber Essentials Plus, 2FA, audit logs, TLS, and Azure hosting are all meaningful positive signals. This is one of the suite’s stronger dimensions, even if the material remains more operational than deeply architectural. 7/10
• Software parsimony versus workflow sludge: COMET is a workflow-rich governance product, which inherently creates process overhead. That overhead may be justified by the domain, but it still limits parsimony and keeps the score low. 4/10
• Compatibility with programmatic and agent-assisted operations: APIs, data exports, integrations, and the new AI assistant point in a positive direction. The score remains moderate because the platform is still primarily workflow-oriented rather than deeply automation-native or text-first. 4/10

Dimension score: Arithmetic average of the five sub-scores above = 5.8/10.

COMET looks like a solid SaaS architecture for its intended use. Its strengths are coherence and governance rather than computational novelty. (16, 25, 26, 27)

Technical transparency: 5.0/10

Sub-scores:

• Public technical documentation: The G-Cloud listing and product pages offer real information on hosting, security, onboarding, support, and integration. That is useful and above average for many niche vendors. The score stops short of strong because the deeper internals remain lightly documented. 6/10
• Inspectability without vendor mediation: An outsider can understand the architecture and functional perimeter fairly well. The AI and analytics internals remain mostly opaque, which keeps this score from going higher. That yields a middling score. 5/10
• Portability and lock-in visibility: COMET provides API and flat-file export paths and runs as an overlay to existing systems, which improves visibility into lock-in and exit. The public materials still do not spell out migration in great depth, so the score stays moderate. 5/10
• Implementation-method transparency: The company is reasonably clear about how the modules are deployed and used operationally, especially through the G-Cloud process. It is much less clear about the internal AI methods and analytic validation. That keeps this score below average. 4/10
• Security-design transparency: COMET exposes meaningful operational security signals through procurement documentation, including hosting, certification, access control, and audit trails. The material says less about secure-by-design boundaries or failure modes, so the score is respectable but not high. 5/10

Dimension score: Arithmetic average of the five sub-scores above = 5.0/10.

COMET is transparent enough to assess as enterprise SaaS. It is not transparent enough to strongly validate the sophistication of its AI layer. (16, 22, 25, 26)

Vendor seriousness: 5.0/10

Sub-scores:

• Technical seriousness of public communication: COMET communicates around real operational failures, audits, and supplier risk rather than around empty AI abstraction. That is a genuine positive. 7/10
• Resistance to buzzword opportunism: The newer AI Assistant and Signals messaging does add hype risk, but the company still anchors those claims in a real risk-intelligence workflow suite. The score is moderate rather than low for that reason. 4/10
• Conceptual sharpness: COMET is conceptually sharp about investigation, assurance, and prevention of repeat failure. It is much less ambiguous than many peers about the operational problem it addresses. 8/10
• Incentive and failure-mode awareness: This is one of COMET’s best dimensions because the whole product is built around learning from incidents and uncovering root causes. Even so, the public AI material says little about false positives or model failure. 4/10
• Defensibility in an agentic-software world: The combination of methodology, domain specialization, certifications, and regulated-sector presence creates some defensibility. The score stays moderate because the company is still small and the AI moat is not publicly proven. 2/10

Dimension score: Arithmetic average of the five sub-scores above = 5.0/10.

COMET looks like a serious niche vendor with a coherent reason to exist. The main caution is that its current AI layer is more plausible than proven in detail. (1, 12, 13, 18, 31)

Overall score: 4.7/10

Using a simple average across the five dimension scores, COMET lands at 4.7/10. That reflects a software suite that is credible and useful in risk governance, with a legitimate but narrow supply-chain-adjacent role, rather than a true supply chain planning or optimization platform.

Conclusion

Public evidence supports the view that COMET is a credible risk-intelligence SaaS vendor with a strong methodology lineage in investigations and assurance. The software appears operationally real, the Azure and G-Cloud footprint is credible, and the supplier-assurance module gives the company a legitimate if narrow supply-chain-adjacent role.

Public evidence does not support treating COMET as a supply chain planning or optimization vendor. Its “supply chain” functionality is about supplier onboarding, risk scoring, audits, and corrective actions, not about forecasting or optimizing flows of goods. The most accurate classification is therefore direct: COMET is a risk intelligence software vendor with a supplier-assurance module, not a supply chain optimization platform.