Launching today
Strac Comply
Get SOC 2 without the sales call
11 followers
Get SOC 2 without the sales call
11 followers
1. Self-serve compliance automation. Sign up, connect AWS, Google Workspace, Okta, GitHub and Slack, and 100+ tests run continuously for SOC 2, ISO 27001, HIPAA, PCI DSS and more. 2. No per-framework fees 3. 14-day free trial, no credit card 4. Built by a data-security company, so it also finds the AI apps and agents in your workspace and maps them to the customer data they can reach 5. Run it from the dashboard or Claude Code via MCP 6. Platform $4,995/yr. Audit, vCISO and pen test tiers above
Launch Team / Built With
Customer.ioAutomate Messaging Everywhere — Startups Get 12 Months Free
Promoted
Hey Product Hunt 👋 I’m Aatish, founder of Strac (YC W22).
Before Strac, I spent 11 years at Amazon building payment security systems. For the last four years, we’ve been building data security for SaaS, cloud, and GenAI.
We’ve also been a compliance customer the entire time.
And every year, the same thing happened: the audit ends, tests quietly drift, and by the next audit cycle we’re collecting evidence almost from scratch again. Compliance somehow gets slower instead of faster.
At the same time, auditors started asking questions that traditional compliance tooling wasn’t designed around:
Which AI tools are employees using?
Which agents can access customer data?
Where is sensitive data actually flowing?
We already had the underlying visibility and controls in Strac.
So we built Strac Comply — security-first compliance for the AI era.
• Continuous tests against your real stack, so you stay audit-ready after the audit
• 100+ automated checks and evidence collection from day one
• Shadow AI and AI governance as real controls, not just policy documents
• SOC 2, ISO 27001, HIPAA, PCI, and GDPR with no per-framework fees
• Run compliance from the dashboard — or from Claude Code, Cursor, Codex, and other agents through MCP
And we wanted the buying experience to be different too:
No sales call. Starts at $4,995/year. 14-day free trial. No credit card.
You can sign up tonight and start running checks immediately.
Would love feedback from anyone who has been through SOC 2 or another audit:
What was the most painful part — and what broke after the first audit was over?
I’ll be here answering questions all day. 👋
Hey hunters, happy to launch Strac Comply today and will be all day here if you have questions :) We've built it from ground up for the AI era.
You can do all compliance work from Claude Code! So no need to even login into our UI.
Auditors love love screenshots, so we create them automatically for them, our tests don't just say "fail" they tell you exactly which user, repo or key is the problem and how to fix, you fix it, re-run, and the evidence updates itself.
The MCP server was fun to build. Every token is scoped (read vs write), and every action an agent takes lands in an append only audit log with the agent and the human it acted for.
Ask me anything technical: integrations, how tests work, what MCP can and can't do. Happy to launch!
Can users set a maximum cost per request or per project so the router stays within a budget?
I like that it works with tools like Claude Code, Cursor and Cline instead of forcing you into a separate workflow.