Menu
Strike Graph
Strike Graph is a multi-framework compliance platform with published starting prices. It automates evidence collection, maps evidence into controls, and offers an Evidence API; packages scale from one framework to enterprise multi-workspace use.
Best for: Teams reusing evidence across frameworks with visible higher-plan starting pricesWatch for: Certify price is unlisted; Evidence API is listed on Enterprise; add-ons cost extra Read our Strike Graph review →
AI and MCP
MCP server: Official. Access: Read-only. Checked 12 Oct 2026.
How much does Strike Graph cost?
Strike Graph has a free tier. Your price depends on plan scope, headcount, services, and contract term.
Price source: view reported prices · checked 2026-10-05
Published prices (5)
| Listed item | Price | Scope |
|---|---|---|
| Scale | From $21,500 / year | One framework from any tier; advertised advanced AI and readiness tools. Additional frameworks, services and AI consumption may cost extra. · Source |
| Enterprise | From $35,000 / year | Builds on Scale with Evidence API, custom frameworks, enterprise workspaces and multi-domain reporting; additional frameworks and services may cost extra. · Source |
| Verify AI Starter | $4,250 / year | Consumption add-on with 350 credits per month; included allowances and credit charging rules require confirmation. · Source |
| Verify AI Standard | $6,500 / year | Consumption add-on with 750 credits per month; included allowances and credit charging rules require confirmation. · Source |
| Verify AI Pro | $10,000 / year | Consumption add-on with 1,000 credits per month; included allowances and credit charging rules require confirmation. · Source |
The separate free-signup page describes up to 15 attachments. The current paid comparison lists Certify with a trial and no base price, Scale from $21,500/year, and Enterprise from $35,000/year. Launch is not listed; paid starting prices exclude additional frameworks and services. Plan source
Ask for the first-year total, renewal cap, implementation charge, required add-ons, and separate audit fee in writing.
What does Strike Graph do?
Strike Graph was founded in 2020. Strike Graph is led by Justin Beals. Strike Graph is headquartered in Seattle, Washington, United States.
Evidence collection
Available · Vendor describes scheduled collection from connected systems, AI-generated integration configurations, and an Evidence API for custom sources.
Scope and limits
Vendor describes scheduled collection from connected systems, AI-generated integration configurations, and an Evidence API for custom sources. Evidence API is listed under Enterprise. The pricing page lists AI Security Assistant on the Certify card (Basic) and the Scale card (Advanced), described as able to write integration code (checked October 5, 2026). Verify AI can be enabled per evidence item and validates attachments against customer-written evidence descriptions; this is not an independent audit opinion.
Auditor workspace
Available · Current paid pricing page lists an auditor role; the Certify card includes a full audit-workbook export and role management.
Scope and limits
Current paid pricing page lists an auditor role; the Certify card includes a full audit-workbook export and role management. The complete permission matrix, underlying-evidence archive and included auditor-seat terms remain unestablished.
Trust center
Available · Current pricing page lists Trust Center and describes sharing compliance material.
Scope and limits
Current pricing page lists Trust Center and describes sharing compliance material. The extracted comparison icons do not establish every plan gate.
Security questionnaires
Available · Pricing comparison lists Security Questionnaires as included on Scale and Enterprise and as an add-on on Certify; the add-on price is not published.
Scope and limits
Pricing comparison lists Security Questionnaires as included on Scale and Enterprise and as an add-on on Certify; the add-on price is not published. Automated responses are generated from implemented controls.
Enterprise administration
Partial · Current pricing confirms Role Management from Certify, SSO on Scale and Enterprise, and Enterprise Workspaces on Enterprise.
Scope and limits
Current pricing confirms Role Management from Certify, SSO on Scale and Enterprise, and Enterprise Workspaces on Enterprise. The current SCIM evidence confirms deactivation, reactivation, and IdP role mapping but does not establish account creation, so the roll-up remains partial.
Continuous control testing
Available · Vendor describes validation of newly uploaded and updated attachments against customer-defined evidence descriptions, with per-evidence enablement.
Scope and limits
Vendor describes validation of newly uploaded and updated attachments against customer-defined evidence descriptions, with per-evidence enablement. No universal control-test interval or independent accuracy result is established.
Multi-framework support
Partial · Vendor's own language: "New frameworks are automatically mapped to your existing controls" and the pricing page sells "Cross-framework mappings" as a named feature -- this is explicitly a crosswalk-mapping model, not independently built native control sets per framework.
Funding history
Strike Graph has raised at least $20.4M across named, dated rounds: a $3.9M seed (TechCrunch, Oct 5, 2020), an $8M Series A led by Information Venture Partners (Strike Graph company blog, 2021), and an $8.5M round led by BAMCAP with Madrona and Information Venture Partners (Strike Graph company blog and Corporate Compliance Insights, both reporting the close around Dec 2023). A third-party aggregator (startupintros.com) reports a higher cumulative total of $29.5M across 5 rounds that does not reconcile against those primary press sources.
How does Strike Graph compare with Scytale, TrustCloud, Iru?
| Attribute | Strike GraphThis profile | Comp AI | Iru | Scytale | TrustCloud |
|---|---|---|---|---|---|
| Best for | Teams reusing evidence across frameworks with visible higher-plan starting prices | Engineering-led teams that value inspectable code or the option to self-host | Teams seeking SOC 2 automation and device management in one platform | Companies without compliance expertise seeking software plus hands-on advisory | GRC teams handling several frameworks, trust reviews, and security questionnaires together |
| Observed price | Free tier | Not published | Up to $15,000 / year for Compliance Automation | $7,500 / year | Not published |
| G2 rating | 4.6/5 (196 reviews) | 4.7/5 (73 reviews) | 4.7/5 (853 reviews) | 4.8/5 (734 reviews) | 4.6/5 (49 reviews) |
| Integrations | 300+ published | 590+ published | Not published | 150+ published | 100+ published |
| Frameworks | 8 listed | 11 listed | 11 listed | 9 listed | 12 listed |
| Onboarding | unknown | guided | guided | bundled expert | self serve |
| Auditors here | 1 | 4 | Not published | Not published | 2 |
| Trust center | Listed | Listed | Listed | Listed | Listed |
Will Strike Graph connect to your stack?
Strike Graph reports 300+ integrations. Check the exact fields, tests, permissions, and plan coverage for each tool you need.
- Which required tools have a native connector, need an API build, or require manual upload?
- What fields and control tests sync, how often, and with which permissions?
- Which connections are included in the quoted plan?
Which frameworks does Strike Graph support?
- SOC 2Strike Graph says
- ISO 27001Strike Graph says
- HIPAAStrike Graph says
- GDPRStrike Graph says
- ISO 27701Strike Graph says
- PCI DSSStrike Graph says
- NIST 800-171Strike Graph says
- CCPAStrike Graph says
Some frameworks use mapped controls rather than native workflows. Confirm the tests and evidence required for each program.
Who does what in a SOC 2 with Strike Graph?
Strike Graph
Organizes the listed control, evidence, and audit workflows.
Your team
Owns policies, control decisions, exceptions, and approval of shared evidence.
The CPA firm
Sets audit scope, tests controls independently, and issues the SOC 2 report.
Software does not issue the SOC 2 report; a licensed CPA firm does. Strike Graph is compliance software, not the SOC 2 opinion issuer. Its pricing FAQ says customers may keep an independent auditor or obtain an introduction through its network. The auditor sets the examination price; the separate $4,000–$8,000/year range for assessment and audit services for approved certifications is not a universal SOC 2 audit quote.
Which auditors work with Strike Graph?
1 licensed audit firms in our directory list Strike Graph experience. Listing experience is not an endorsement.
| Firm | Licence | Peer review |
|---|---|---|
| 360 AdvancedPublished Type 2 fee: $10,000–$80,000 | Licensed CPA | Pass |
Questions to ask in a Strike Graph demo
- Which parts of enterprise administration require another tool or service?
- Can you demonstrate SCIM provisioning in the product?
- Which parts of native multi-framework support require another tool or service?
- Which plan includes SCIM, and is it a paid add-on?
- What renewal increase and minimum contract term should we put in writing?
- Is the SOC 2 audit contracted with a separate CPA firm, and what does that firm charge?
Strike Graph FAQ
Where is Strike Graph based?
Strike Graph is headquartered in Seattle, Washington, United States.
Who runs Strike Graph?
Justin Beals is the CEO of Strike Graph.
Who founded Strike Graph?
Justin Beals and Brian Bero founded Strike Graph in 2020.
Does Strike Graph include the SOC 2 audit?
Strike Graph is compliance software, not the SOC 2 opinion issuer. Its pricing FAQ says customers may keep an independent auditor or obtain an introduction through its network. The auditor sets the examination price; the separate $4,000–$8,000/year range for assessment and audit services for approved certifications is not a universal SOC 2 audit quote. A licensed CPA firm issues the SOC 2 report.
Is Strike Graph itself SOC 2 compliant?
Supporting a buyer's SOC 2 program does not establish that Strike Graph holds a current SOC 2 report. Ask for the vendor's current report during security review.
What does Strike Graph integrate with?
Strike Graph reports 300+ integrations. Confirm the fields, tests, permissions, and plan coverage for your own tools.
Similar platforms
Strike Graph on SOC2Auditors
Sources 23 records · last read 2026-10-05
These links show what we checked and when.
| Establishes | Source | Retrieved |
|---|---|---|
| At the August 11 check, the page listed Certify $10,000/year, Scale $21,500/year, and Enterprise $35,000/year. This price observation is historical; Role Management, SSO, and Enterprise Workspaces were also listed by plan. | Vendor (Strike Graph) Vendor docs | 2026-08-11 |
| Current product-update log confirms SCIM deactivation, reactivation, and identity-provider role mapping. | Strike Graph Vendor docs | 2026-08-11 |
| At the July 24 check, the separate free signup page described 15 attachments, a risk assessment, Office 365/Google Drive integrations, and expert support. | Vendor (Strike Graph) Vendor docs | 2026-07-24 |
| 300+ systems/tools and 50,000+ data points for automated evidence collection; Evidence API option. | Vendor (Strike Graph) Vendor docs | 2026-07-24 |
| Strike Graph has been rated 4.7 stars by 193 verified reviews on G2 (dated reading from G2's public listing). | G2 Review platform | 2026-07-24 |
| $3.9M seed round, Oct 2020, led by Madrona Venture Group. | TechCrunch Press | 2026-07-24 |
| 2023 funding round (reported as $7M by GeekWire vs $8.5M in the vendor's own release) and a cumulative total of $18.9M reported at that time. | GeekWire Press | 2026-07-24 |
| $8.5M funding round led by BAMCAP with Madrona and Information Venture Partners, Dec 2023; Jim Sheward (BAMCAP) joined the board. | Corporate Compliance Insights Press | 2026-07-24 |
| At the August 31 check, annual starting prices were Certify $10,000, Scale $21,500, and Enterprise $35,000. The Certify figure is now historical; the page listed Evidence API under Enterprise and did not establish an onboarding delivery model. | Strike Graph Vendor docs | 2026-08-31 |
| HIPAA framework support recorded as vendor-claimed. Tier 1 framework; HIPAA certification add-on priced separately ($4k-$5k/yr). | Strike Graph Vendor docs | 2026-07-24 |
| Vendor-claimed HIPAA framework support. The checked framework page does not establish a specific risk-analysis workflow; request a scoped demo. | Strike Graph Vendor docs | 2026-08-31 |
| Not established. The reviewed Strike Graph framework page describes HIPAA program support but does not establish the vendor's own PHI permission or customer BAA route. | SOC2Auditors.org Editorial | 2026-08-31 |
| At the August 31 check, Certify started at $10,000/year with one Tier 1 framework; that base price is no longer listed. Scale and Enterprise showed $21,500/year and $35,000/year starting prices. HIPAA and SOC 2 were Tier 1; an additional Tier 1 framework cost $3,000/year on Certify and $2,000/year on Scale/Enterprise. Launch was limited to SOC 2 Security TSC. | Strike Graph Vendor docs | 2026-08-31 |
| At the September 28 check, the plan comparison listed Launch as free with limited SOC 2 Security TSC, Certify without a public base price and with a free-trial invitation, Scale starting at $21,500/year, and Enterprise starting at $35,000/year. Launch is no longer listed; see the October 5 check. Starting prices are not ceilings; additional frameworks and services are separately priced. | Strike Graph Vendor docs | 2026-09-28 |
| Company founding year, Seattle headquarters and private ownership. | LinkedIn Company directory | 2026-09-29 |
| Founder and CEO Justin Beals. | Strike Graph Vendor docs | 2026-09-29 |
| Company origin story identifies Justin Beals and Brian Bero as founders. | Strike Graph Vendor docs | 2026-09-29 |
| G2 seller listing shows 4.6/5 from 196 reviews; snapshot retrieved 2026-09-29. | G2 Review platform | 2026-09-29 |
| Current paid cards list Certify without a base price, Scale from $21,500/year, and Enterprise from $35,000/year. Enterprise lists Evidence API. Verify AI consumption add-ons are listed at $4,250/year (Starter, 350 credits per month), $6,500/year (Standard, 750) and $10,000/year (Pro, 1,000). Independent auditors set their own prices. | Strike Graph Vendor docs | 2026-10-05 |
| Separate free-signup page describes up to 15 attachments, a risk assessment, Office 365 and Google Drive connections, and expert support. Neither it nor the current paid comparison names a Launch plan or a SOC 2 Security-only limit. | Strike Graph Vendor docs | 2026-10-05 |
| Evidence refresh follows a customer-defined schedule. Standard connections, AI-generated configurations and a REST Evidence API are described as collection routes. | Strike Graph Vendor docs | 2026-10-04 |
| Verify AI validates attachments against the customer's evidence descriptions and supports per-evidence enablement and role-scoped visibility of results. These are vendor claims, not independent accuracy findings. | Strike Graph Vendor docs | 2026-10-04 |
| Page shows 4.7/5 from nine product reviews and an October 1, 2026 update date. All nine visible review bodies date from May 2023 to April 2024; seven are marked vendor-referred with an incentive, two non-incentivized. The sample does not isolate current Verify AI performance. | Capterra Review platform | 2026-10-04 |
Not yet confirmed
- Customer count · last checked 2026-09-24