# Strike Graph Reviews **Vendor:** Strike Graph **Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance) **Average Rating:** 4.7/5.0 **Total Reviews:** 188 ## About Strike Graph Strike Graph is an AI-native compliance management software designed to revolutionize how businesses achieve and maintain security certifications, including CMMC, NIST, ISO 27001, HIPAA, SOC 2, PCI DSS, TISAX, and more. With a mission to help companies efficiently and effectively prove compliance and build trust, Strike Graph transforms compliance from a burdensome expense into a strategic advantage. Traditional security compliance processes are often slow, opaque, and costly, requiring reliance on outdated methods. Strike Graph eliminates these inefficiencies by providing companies with a transparent, objective solution to design, operate, and measure their security programs. Strike Graph’s innovative tools simplify every stage of compliance. It enables users to create customized security programs tailored to their specific risks and operational needs, streamlines evidence collection and testing, and offers in-platform certification options that reduce reliance on third-party auditors. This comprehensive approach not only saves time and money but also ensures continuous compliance monitoring to protect businesses against evolving threats. The platform caters to security leaders in all industries, including SaaS, FinTech, HealthTech, EdTech, and beyond, offering a knowledgeable and approachable partner in compliance management. Strike Graph’s AI-powered features, like Verify AI, enhance accuracy and efficiency while ensuring data security through self-hosted models. By turning compliance into a revenue enabler, Strike Graph helps companies build trust with their customers, partners, and stakeholders, paving the way for sustainable growth and innovation. ## Strike Graph Pros & Cons **What users like:** - Users find it easy to use Strike Graph, appreciating the **intuitive document management** and supportive expert assistance throughout the process. (77 reviews) - Users appreciate the **intuitive interface and automation** of Strike Graph, enhancing efficiency in certification management and compliance. (76 reviews) - Users praise the **exceptional customer support** of Strike Graph, providing quick and helpful assistance throughout their compliance journey. (60 reviews) - Users appreciate the **intuitive and user-friendly compliance management** of Strike Graph, simplifying the audit preparation process. (51 reviews) - Users praise the **incredibly helpful team** at StrikeGraph for their quick responses and professional support. (47 reviews) - Compliance (40 reviews) - Evidence Management (39 reviews) - Useful (39 reviews) - Guidance (37 reviews) - Document Management (33 reviews) **What users dislike:** - Users find **navigation and automation improvements needed** for easier control and evidence management to streamline their processes. (24 reviews) - Users find navigating the **evidence collection process tricky** , struggling with excessive initial requirements and partial automation. (20 reviews) - Users face **integration issues** with Strike Graph, lacking flexible workflows and seamless connections to various tools. (15 reviews) - Users feel the **lack of guidance** during onboarding can be overwhelming, particularly for those unfamiliar with compliance workflows. (14 reviews) - Users find the **navigation of evidence management tricky** , requiring customization and improvements in automation for better efficiency. (13 reviews) - Improvements Needed (11 reviews) - Learning Curve (11 reviews) - Learning Difficulty (9 reviews) - Limited Integrations (9 reviews) - UX Improvement (9 reviews) ## Strike Graph Reviews ### 1. Exceptional Tool for SOC II Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Emily G. | Operations Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** April 01, 2025 **What do you like best about Strike Graph?** I appreciate the way Strike Graph tracks progress and shows what items need the most attention. This feature helps me see how practical completion is and understand where we stand, especially since there are so many items involved in an audit. The initial setup was good, and I find it valuable for obtaining a SOC II certification. **What do you dislike about Strike Graph?** I find it challenging to better see which outstanding items are applied to multiple controls. It only shows it as outstanding for one control instead of both, which makes it look like there’s more than one evidence needed when it’s really the same evidence for more than one control. **What problems is Strike Graph solving and how is that benefiting you?** I use Strike Graph for security audits to obtain a SOC II certification. I like how it tracks progress and highlights what needs attention, helping us see practical completion and the status of many audit items. ### 2. Streamlined Compliance with Exceptional Support **Rating:** 5.0/5.0 stars **Reviewed by:** John Y. | Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** August 26, 2024 **What do you like best about Strike Graph?** I have been using Strike Graph for risk management and SOC2 Type1 and Type 2 Compliance for a couple of years, and it has been a great experience. I like the simplicity of the design and how compliance can be done effortlessly. The way document collection works is impressive, and I find it easy to track responsibility and timelines. It also provides a huge number of documents and all kinds of templates for our use. The support is awesome, with our account manager always being responsive and patient. Additionally, the initial setup was super easy, which was a big plus for our team. **What do you dislike about Strike Graph?** There are small things on the document automatic collection. We have it integrated with our SharePoint / OneDrive, but it could be more helpful if the function can be enhanced. I am hoping it can automatically collect all documents under one folder, not just limited to one file. **What problems is Strike Graph solving and how is that benefiting you?** I use Strike Graph for risk management and SOC2 compliance. It solves issues like tracking expiry, review, and approval dates, and eliminates manual spreadsheet tracking. The simplicity of compliance design and document management is impressive, saving us time and simplifying processes. **Official Response from Katie Burgess:** > Thank you for your positive feedback. We're happy to hear you find value in our dashboards, documentation, and support. Congratulations on your successful SOC 2 audit! ### 3. Excellent SOC 2 Compliance Assistance **Rating:** 5.0/5.0 stars **Reviewed by:** Melissa S. | Security Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** September 12, 2023 **What do you like best about Strike Graph?** The platform makes it easy to organize evidence items across a variety of certifications and frameworks. The examples and descriptions for each evidence item are clear, and most items include a link to a help page that explains what kinds of materials will satisfy the requirements for the control(s) that item is linked to. Being able to link a single evidence item to multiple controls also really helps reduce the overall workload. Their example policies helped us take information that had been stored in a wide variety of places (and in people’s heads) and pare it down into a manageable set of documents that are easy for our employees to find and use. Caroline did an excellent job helping us get set up in the beginning. She made what felt like a daunting process manageable, and her attitude was consistently bright. Edit (1/29/26): The folks I’ve worked with over the last couple of years have all been great, and we really appreciate the insight they provide. Access to support is immediate: you can get solid answers from the browser help, and when you email them you receive a response quickly. The flexibility to organize evidence items according to controls that may span multiple frameworks makes things much easier to respond to client requests. The whole crew has made the audit process as easy and painless as they can. I've been experimenting with the Security Questionnaire AI tool and it is surprisingly good. You still have a bit of work to do to double-check that the answers really do apply to the question, sometimes it will pull in a control that isn't exactly what the client question is about, but it has been able to identify a good number of solid answers to the questions. **What do you dislike about Strike Graph?** Nothing. The tool has been great and I can't say I ran into any trouble using it. Caroline took down some notes here and there about questions I had while entering information in, but none were show-stoppers and I honestly can't even remember most of what they were. It would be nice to have an integration for Bitbucket through Atlassian since JIRA is available. I was also a bit bummed that the AWS integrations had to go through Cumulus, which we don't have. **What problems is Strike Graph solving and how is that benefiting you?** They helped us attain a SOC 2 Type 1 audit so far. This benefitted our company by helping organize security information in a way that is easy to visualize and present to stakeholders. Our clients will be able to request our SOC 2 information for their auditors and compliance requirements. Our employees have a set of policies that can be referred to easily for questions and the policies can grow and change we we head into our future. ### 4. Easy Evidence Management & Assignment **Rating:** 4.0/5.0 stars **Reviewed by:** Stuart H. | Lead BA/IT Specialist, Small-Business (50 or fewer emp.) **Reviewed Date:** December 13, 2024 **What do you like best about Strike Graph?** Periodic reminders about expiring evidence is very helpful for staying on top of what evidence needs to be refreshed, when, and how often. Control- and evidence-assignment makes it simple for different users to look up what has been assigned to them, which controls have been fully/partially satisfied. The web portal makes it easy to access things from multiple locations. They've recently improved the interactivity of the website, which makes navigation and multi-tab management easier than it was previously. **What do you dislike about Strike Graph?** A lot of the documentation & examples are focused on AWS and particular products/services, which can make things difficult inexperienced users from organizations that use other options. The difference between evidence owners & control owners can sometimes cause some confusion, since control owners aren't warned about linked evidence that's expiring - that would be a nice option, since control owners are the ones considered responsible for associated evidence, even if a particular evidence item is assigned to someone different. **What problems is Strike Graph solving and how is that benefiting you?** Managing SOC2 and PCI compliance from a single location. Knowing which evidence items are soon-to-expire, and who's assigned to them. Evidence management - all available from the website (provided the user has permission to view/download them) ### 5. Simple and Effective Compliance Guidance **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** November 18, 2024 **What do you like best about Strike Graph?** I found the compliance document templates extremely helpful in establishing a framework and creating policies that address the necessary controls. The system itself is very helpful in understanding what needs to be done to meet the compliance needs of various frameworks, and where there is potential overlap. Support is always prompt and helpful as well. **What do you dislike about Strike Graph?** These frameworks are still complex and while Strikegraph does a great job brining things together and making them consumable, support is still needed to unravel the complexities. I would appreciate a mechanism to prompt for updates to templates, new best practices, etc. for already established frameworks. **What problems is Strike Graph solving and how is that benefiting you?** Establishing policies, controls, etc. and ensuring we are compliant with various frameworks. We are currently using Strike Graph for HIPAA and SOC 2 Type 2 compliance, as well as PEN testing. ### 6. Patient, Fantastic Customer Success Support for Setting Up Our Compliance Plan **Rating:** 5.0/5.0 stars **Reviewed by:** Benjamin J. | Director of IT and Security, Small-Business (50 or fewer emp.) **Reviewed Date:** January 30, 2026 **What do you like best about Strike Graph?** The StrikeGraph customer success team was patient and integral in helping me get my compliance plan set up in the system. They were also great to talk through specific compliance challenges with, and they helped me figure out how to meet those requirements in a way that worked for our needs. Overall, the customer support and communication were fantastic. **What do you dislike about Strike Graph?** Like most other compliance platforms, it lacks tools to automate many of the tasks required for on-prem environments. It would be especially helpful to have better integration tools for System Center or VMware. **What problems is Strike Graph solving and how is that benefiting you?** StrikeGraph is helping us simplify the management of compliance tasks and dates for our SOC 2. With our relatively small team, that’s really important, and they’re doing a much better job than the previous platform we were using. **Official Response from Cayla Marshall:** > Ben, thank you very much for your kind words! It's been wonderful working with you and your team, and we're looking forward to another year of compliance success! ### 7. Making SOC 2 Type II Achievable for First-Timers **Rating:** 5.0/5.0 stars **Reviewed by:** Arniel d. | Information Technology Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2024 **What do you like best about Strike Graph?** They are very proactive and helpful with our team. Strike Graph is always there with us when we are having hard times regarding our evidence and controls. **What do you dislike about Strike Graph?** None that I can think of. Strike Graph is always active in helping us. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is helping us solve the complexity and uncertainty that comes with compliance, especially since this is my first time pursuing SOC 2 Type II. Before using it, the process felt overwhelming: managing evidence, tracking controls, and ensuring everything aligns with audit requirements can quickly become disorganized and time-consuming. ### 8. Seamless SOC2 Compliance with Top-Notch Support **Rating:** 4.5/5.0 stars **Reviewed by:** Stefan P. | Business Analytics / Sales Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** February 02, 2026 **What do you like best about Strike Graph?** I found Strike Graph simplifies the SOC2 compliance process, which is something we can't manage on our own. It definitely speeds up the process for us. I appreciate the quick, useful, and straightforward support their team provides, and their website is very good. I recommend Strike Graph for startups and growing companies needing SOC2 compliance, as having an internal compliance team can be too expensive and time-consuming. Everything worked smoothly for our compliance needs, and I'd rate the initial setup a 9 out of 10. I'm also likely to recommend Strike Graph to others, as I rate it a 9 on the recommendation scale. **What do you dislike about Strike Graph?** Some of the templates and forms could be slightly more customizable to fit unique workflows **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph simplified the SOC2 compliance process, speeding it up and making it manageable without needing an expensive internal team. The support is quick, useful, and the website is very good. **Official Response from Stephanie Lorraine:** > Stefan, thank you for this thoughtful review! We're thrilled to hear our platform helped streamline compliance for your team and accelerate your path to readiness! It's especially rewarding to hear how our support team and onboarding experience is one of the highlights. We work hard to provide fast, straightforward guidance so you can stay focused on your priorities. We truly appreciate the recommendation to enhance our policy templates and will absolutely do that moving forward! Thank you again for sharing your experience and we look forward to continuing to support you and your team! ### 9. Streamlined Compliance with Intuitive Interface **Rating:** 4.0/5.0 stars **Reviewed by:** Vivek S. | Associate Engineer, Computer Software, Enterprise (> 1000 emp.) **Reviewed Date:** January 21, 2026 **What do you like best about Strike Graph?** I really appreciate how Strike Graph simplifies and structures the entire compliance process. It breaks down complex frameworks into clear, actionable tasks, which helps teams easily understand their responsibilities. The centralized evidence management, real-time compliance tracking, and guided workflows significantly stand out as they reduce confusion and manual follow-ups. I also like the clean and intuitive interface that makes it easy for both technical and non-technical users to navigate. The platform does a great job of keeping everyone aligned without overwhelming the team, and the support provided throughout the compliance journey really makes the process feel more manageable. Additionally, Strike Graph fits well into our existing workflow by allowing us to integrate compliance management with the tools we already use, keeping compliance aligned with day-to-day work. **What do you dislike about Strike Graph?** While Strike Graph works well overall, there is a learning curve initially, especially for users who are new to compliance frameworks. Some workflows could be made more flexible to better fit different company processes, and having more in-app guidance or examples for certain controls would help speed up onboarding. Additionally, expanding integrations with more tools would further reduce manual effort and make the platform even more seamless. **What problems is Strike Graph solving and how is that benefiting you?** I use Strike Graph to centralize compliance and security management. It simplifies our audit readiness by automating processes for SOC 2 and ISO 27001, tracking policies, and managing security tasks, reducing manual effort and improving collaboration between teams. ### 10. Effortless Compliance with Time-Saving Templates **Rating:** 5.0/5.0 stars **Reviewed by:** Roberto D. | IT Security Administrator, Enterprise (> 1000 emp.) **Reviewed Date:** December 20, 2025 **What do you like best about Strike Graph?** The platform is easy to use and makes it clear what is required to meet each control. I also appreciate being able to download and use templates when necessary, as this feature has saved me a significant amount of time. Recently, I have been able to use the questionnaire AI which is extremely helpful. **What do you dislike about Strike Graph?** I do feel that the reporting could be better. I do rely on it much because I do believe it is as accurate as it could be. Improvement is needed there. **What problems is Strike Graph solving and how is that benefiting you?** Since we do not have a dedicated GRC team, outsourcing can become quite expensive. However, with Strike Graph, we have been able to lower our overhead and receive the guidance we need as we work toward our GRC initiatives. **Official Response from Lisa Ash:** > Roberto, thank you very much for taking the time to share your feedback with us, we truly appreciate it. We look forward to continuing our work together! ### 11. Using StrikeGraph as a Enterprise Solution for GRC **Rating:** 5.0/5.0 stars **Reviewed by:** Larry F. | VP IT Security, Enterprise (> 1000 emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Strike Graph?** Strike Graph is an Enterprise Governance, Risk, and Compliance (GRC) tool that has improved Sanmina's security compliance and risk management across 23 countries, multiple locations, and various frameworks. By centralizing operations and replacing manual tracking, it has significantly simplified compliance, enhanced security, and improved our risk matrix documentation. The platform effectively addresses complex Enterprise Content Management challenges and supports Cybersecurity Maturity Model Certification (CMMC) efforts, including Plans of Action and Milestones (POAMs) and System Security Plans (SSP). Furthermore, a successful pilot program has established Strike Graph as an outsourced Third-Party Risk Management (TPRM) solution, streamlining vendor assessments and compliance reporting. The impact of Strike Graph is clearly demonstrated through five successful CMMC assessments, where it facilitated the organization and evaluation of over 600 artifacts of evidence at each plant. This has considerably boosted Sanmina's competitiveness for Department of Defense (DoD) contracts. Moving forward, Sanmina intends to explore additional applications, such as implementing custom risk assessments for all vendors. **What do you dislike about Strike Graph?** I don't have any strong dislikes; they are willing to meet with their customers and accept feedback to improve their product. Every request I have made has been added to their roadmap for a future release. **What problems is Strike Graph solving and how is that benefiting you?** Organizing and storing over 600 artifacts of evidence (per plant) to support CMMC, which is a requirement to mainaine compliance. I can't imagine trying to do this without StrikeGraph. **Official Response from Stephanie Lorraine:** > It is such a joy working with you! I am so proud of the effort you and your entire team has put in; those successful assessments are a well-deserved win to top off all the hard work!! Everyone at Strike Graph truly appreciates the thoughtful review and feedback allowing us to continue growing together. I am excited to share that the SSP, POA&M, and SPRS score features you mentioned have officially been released and are now available for our CMMC customers! ### 12. Great Compliance Framework System & Service **Rating:** 5.0/5.0 stars **Reviewed by:** Bonnie S. | COO, Small-Business (50 or fewer emp.) **Reviewed Date:** November 07, 2023 **What do you like best about Strike Graph?** While SOC 2 compliance takes a lot of work, Strike Graph eased our load by providing a easy-to-use system that organizes and reports on our data clearly so that it is easy to find outstanding tasks and to collaborate. The Strike Graph team is always helpful and quickly answered our questions. Topping this off, if we decide to add more compliance frameworks, the Strike Graph system can use our current answers to give us a head start. We've also been using the new feature where we upload security compliance forms from our customers to get initial results filled in based on info we already have in Strike Graph. This feature saves a lot of time! **What do you dislike about Strike Graph?** We did not find any issues that the Strike Graph team was unable to help us understand. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph made it easy for us to complete our SOC 2 Type 1 compliance. We are well placed to perform our first SOC 2 Type 2 test next year. ### 13. Strike Graph and team are fantastic! **Rating:** 5.0/5.0 stars **Reviewed by:** Ben C. | Application Support Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** June 18, 2024 **What do you like best about Strike Graph?** When you first sign in to your Strike Graph portal, you can immediately see how beautifully everything is setup. Easy to understand and follow along. The controls section links seamlessly with the evidence section, giving you quick access to everyting you are going to need. Strike Graph also supplies templates that are simple to work with and update. The best part of Strike Graph though is the team behind it. I had the pleasure of working with two Customer Success team members and they were both amazing. Lisa Ash, in particular, made the process so much easier than i thought it was going to be. When i started our company's SOC certification journey...it was daunting to say the least. Lisa expertly guided me on what to focus on, what was necessary, and the best way to work my way forward. Our company wouldn't be SOC certified now if it wasn't for Lisa's above-and-beyond support. I can't thank her enough! **What do you dislike about Strike Graph?** I cannot think of one thing that was "bad" or "off" about Strike Graph. Highly recommend the service. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph was a huge help in getting SOC certified, and pointing out deficiencies in our policies and procedures. ### 14. Strike Graph Made CMMC Clear with Simple, Doable Steps **Rating:** 5.0/5.0 stars **Reviewed by:** WayPoint Coaching I. | President, Small-Business (50 or fewer emp.) **Reviewed Date:** January 29, 2026 **What do you like best about Strike Graph?** CMMC has always felt vague to me. Strike Graph broke it down into simple, doable steps that were straightforward and easy to follow. **What do you dislike about Strike Graph?** I only needed CMMC Level 1, but I still had to sort through Level 2 controls because they were never successfully removed from my dashboard. **What problems is Strike Graph solving and how is that benefiting you?** CMMC is required for anyone doing business with the government, and Strike Graph helped me complete the process quickly. It made it much easier to get through the requirements and move forward without getting stuck. ### 15. One Central Hub for Documentation That Keeps Everyone Aligned **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Transportation/Trucking/Railroad | Mid-Market (51-1000 emp.) **Reviewed Date:** January 29, 2026 **What do you like best about Strike Graph?** One single location for all the documentation makes it easier for everyone to know where to store the documentation **What do you dislike about Strike Graph?** The most challenging aspect of Strike Graph in my experience involved searching past documentation stored materials. While it may have been an user error, sometimes being able to retrieve past documents was confounding. Sometimes it felt that documents may have become corrupted in storage or the formatting changed somehow **What problems is Strike Graph solving and how is that benefiting you?** The biggest aspect that Strike Graph assisted with is the organizational compliance gathering in one tool and that we could see the documentation process year over year (even with small hiccups in reading older documents.) Everyone knowing where the documentation belonged solved the biggest issue in compiling these critical pieces of evidence ### 16. Easy to use platform, excellent support and guidance. **Rating:** 5.0/5.0 stars **Reviewed by:** Matt C. | President / CEO, Small-Business (50 or fewer emp.) **Reviewed Date:** November 07, 2023 **What do you like best about Strike Graph?** The Strike Graph dashboards continue to improve with more relevant and helpful information. I love having our entire information security program managed on this platform, it saves us a massive amount of time. Great people to work with too! **What do you dislike about Strike Graph?** I think that a simple warning 7 days before the Auto Collection runs to give the user a reminder to update their documentation before the Auto Collection runs, if they forget then give an alert after Auto Collection if the document did not change. I know the AI engine tries to do this, but I would just make it a rule, if no changes, flag it for review. **What problems is Strike Graph solving and how is that benefiting you?** They are giving us the platform we need to achieve SOC2 compliance. ### 17. Essential for Cybersecurity Audits, Easy to Use Once Learned **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User **Reviewed Date:** January 29, 2026 **What do you like best about Strike Graph?** I liked that Strike Graph was easy to use once I figured out how the user interface worked. The user experience was really straightforward, and it provided the output I needed for my level one assessment. **What do you dislike about Strike Graph?** The user interface was not as intuitive as I initially thought. There were several options and things that needed to be clicked, but like I said, once I figured out what the user experience looked like and felt like, I was able to complete my tasks. **What problems is Strike Graph solving and how is that benefiting you?** I use Strike Graph because it documents the cybersecurity audit components I need, providing a step-by-step guide—it's the only solution I found that does this comprehensively. ### 18. Centralized Compliance Dashboard Makes SOC2 Management Easier, Minor Setup Issues **Rating:** 5.0/5.0 stars **Reviewed by:** Beth B. | Support Engineer. The site will not let me upload a screen shot., Mid-Market (51-1000 emp.) **Reviewed Date:** October 15, 2025 **What do you like best about Strike Graph?** Having all my reminders centralized in one place, like the Compliance Dashboard, has made it much easier to stay organized and keep track of everything. I really appreciate being able to upload all common file formats using drag and drop. The ability to assign issues to specific users is extremely useful, and the email notifications about expiring evidence are a great help. Thank you for making SOC2 compliance so much less time-consuming. **What do you dislike about Strike Graph?** I've encountered some difficulties when trying to set up automated evidence collection. However, I believe these issues are likely related to the security measures in place on our company's intranet. **What problems is Strike Graph solving and how is that benefiting you?** We successfully completed SOC2 for the first time, and both we and our customers are very pleased with the outcome. ### 19. Streamline SOC 2 & Pen Testing—Strikegraph Is Highly Recommended **Rating:** 5.0/5.0 stars **Reviewed by:** Lukasz S. | Head of Engineering, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** August 27, 2024 **What do you like best about Strike Graph?** What I like best about Strikegraph is how seamlessly the platform brings both SOC 2 compliance and penetration testing together in one place. Having a unified solution saves our team significant time and reduces the complexity that usually comes with managing these processes separately. The user interface is intuitive, making it easy to track our progress and ensure all requirements are met. I’m particularly impressed with the depth of expertise the Strikegraph team brings—they offer clear, actionable guidance not just for SOC 2 but also for pen testing, making the entire compliance and security journey much more manageable and efficient. **What do you dislike about Strike Graph?** While our experience with Strikegraph has been overwhelmingly positive, one area for improvement might be further streamlining the integration of SOC 2 compliance tasks and penetration testing workflows. Initially, it required some effort to get our team fully up to speed on how both components—compliance and pen testing—fit together within the platform. Additional tailored onboarding resources or more detailed walkthroughs for managing both SOC 2 and penetration testing in parallel would be helpful. Nonetheless, the Strikegraph support team has always been responsive in addressing any questions or challenges we encountered. **What problems is Strike Graph solving and how is that benefiting you?** Strikegraph is solving the traditionally complex and time-consuming challenge of achieving and maintaining SOC 2 compliance. Instead of relying on scattered documents and manual checklists, their platform centralizes all of our compliance activities in one place, making it easy to assign responsibilities, track progress, and ensure nothing is missed. Additionally, Strikegraph’s integration of penetration testing within the same environment gives us a clear, holistic view of our security posture and allows us to address vulnerabilities proactively. The biggest benefit has been peace of mind—knowing that both our SOC 2 requirements and our pen testing obligations are managed efficiently and transparently. This not only saves countless hours for our team but also helps us build greater trust with customers by demonstrating a strong commitment to security and compliance. ### 20. Strike Graph is very thorough, friendly and helpful and has made our SOC2 Journey much easier **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** May 31, 2024 **What do you like best about Strike Graph?** The Strike Graph platform is very intuitive and easy to use. Our reps walked us through every aspect of the platform, and explained the whole process of getting SOC2 certification. Even though it's overwhelming, their help documentation and extensive templates for every policy or compliance email you may need has made getting our documentation in order much faster than writing everything from scratch. **What do you dislike about Strike Graph?** It would be nice to have a bit more handholding, but honestly they have provided so many resources and online guidance that it's really unnecessary. And customer support is fantastic if you have a question. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is helping our company get into compliance with Security Requirements, and will be applying for SOC2 Certification on our behalf after all of the required controls are met. This is very beneficial because the process is super complicated and I'm not sure we could have done this easily on our own. ### 21. Medadept experience with Strike Graph for SOC 2 audits **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** October 10, 2025 **What do you like best about Strike Graph?** My colleagues at Medadept and I appreciate the personal attention the Strike Graph team offered through our two SOC 2 audit engagements in 2025. **What do you dislike about Strike Graph?** The online Strike Graph platform has a lot of moving parts that requires some learning time. Again, their personalized support was valuable in getting through the learning curve, **What problems is Strike Graph solving and how is that benefiting you?** Since Medadept offers cloud-hosted SaaS solutions to healthcare providers, it is crucial for the company to demonstrate its dedication to compliance with Trust Services principles. ### 22. Strike Graph is SO helpful! **Rating:** 4.0/5.0 stars **Reviewed by:** Solveig F. | Sr. Customer Success Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** September 28, 2022 **What do you like best about Strike Graph?** The Strike Graph UI is very intuitive & user-friendly. Things like drag and drop make it very easy to load evidence. The policy templates were an AMAZING help. **What do you dislike about Strike Graph?** If you deactivate evidence for one control, it will deactivate for all controls. I believe this is a bug and can be improved upon for ease & user experience. **What problems is Strike Graph solving and how is that benefiting you?** I had not previously been involved with the inner workings of audits. Strike Graph provided everything I needed to get started. A big help for a newbie. Being able to keep everything organized & have real time status of progress & outstanding items needing to be addressed is a huge help. ### 23. The tool greatly assisted us in achieving SOC compliance **Rating:** 4.5/5.0 stars **Reviewed by:** Vinay V. | Senior Infrastructure Engineer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** August 17, 2023 **What do you like best about Strike Graph?** Integrations for evidences was really cool thing and it was very helpful to integrate evidences from JIRA and AWS **What do you dislike about Strike Graph?** No thing like dislike, Strikegraph improving day-by-day **What problems is Strike Graph solving and how is that benefiting you?** We are using Strike Graph for SoC audit purpose and best tool to upload evidences and easy way of tool integrations like Jira, Google drive etc ### 24. Great Evidence Hub, but Support Feels Hard to Reach **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Manufacturing | Small-Business (50 or fewer emp.) **Reviewed Date:** March 18, 2026 **What do you like best about Strike Graph?** Single place to upload all the evidence for my audit(s) **What do you dislike about Strike Graph?** Support - difficult to get someone to help you, real push to use an AI bot and the answers received give me the sense that they want to call a ticket closed vs helping the customer, customer success was OOO for over a month a no new person was assigned (right during our audit window) **What problems is Strike Graph solving and how is that benefiting you?** single repository for SOC2 evidence. **Official Response from Katie Burgess:** > We are very sorry to hear about the challenges with our help center AI bot, as well as any delay in communication. Our goal is to make it faster and easier to get answers, but not at the expense of feeling heard or actually solving your problem. We’d love to make it right. Please reach out to customersupport@strikegraph.com so we can escalate your issue and help get it solved. Thank you again for your honest feedback — it helps us get better. ### 25. Easy to Use, Fast Reviews, and Well-Documented Materials **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Logistics and Supply Chain | Enterprise (> 1000 emp.) **Reviewed Date:** April 17, 2026 **What do you like best about Strike Graph?** It’s easy to use and provides helpful feedback on materials and proof. The AI agent documents items very well and reviews the materials quickly. Team was availalble to answer questions and provide availbility for meetings with others to discuss findings. **What do you dislike about Strike Graph?** Sometimes answers for what was missing from proof was ambiguous or was forced to make it correct manually after AI scans. **What problems is Strike Graph solving and how is that benefiting you?** Strikegraph helps us document and find out status of CMMC Compliance and prepare for an audit. It allow us to give access to the data needed quickly without giving extra access. ### 26. Intuitive Automation, but Evidence Collection Still Feels Manual **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Staffing and Recruiting | Mid-Market (51-1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about Strike Graph?** Its intuitive interface and automation make compliance tracking much simpler and less manual. **What do you dislike about Strike Graph?** Evidence collection and some workflow details can feel a bit manual and less intuitive than expected. **What problems is Strike Graph solving and how is that benefiting you?** It reduces the manual work of compliance and audit prep, which saves us time and makes ongoing compliance much easier to manage. ### 27. Simple, Intuitive, and Cost-Effective Compliance Management **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** April 20, 2026 **What do you like best about Strike Graph?** Simple, intuitive interface. Ability to easily edit evidence and controls. Cost-effective. **What do you dislike about Strike Graph?** A little clicky. Sometimes you could reduce the amount you need to click by applying forms of bulk updates or allowing easier editing workflows. **What problems is Strike Graph solving and how is that benefiting you?** StrikeGraph not only comes with the application itself, but a dedicated and knowledgeable team that are responsive to our needs. This was our first time going through the SOC-2 process and they have worked to help us understand how to work through the documentation hurdles every step of the way. ### 28. Strike Graph Review **Rating:** 5.0/5.0 stars **Reviewed by:** Antonio G. | IT Systems Engineer II, Small-Business (50 or fewer emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Strike Graph?** The instructions are easy to follow. I like the way that is gives you alerts to let you know when there are expired documentation. **What do you dislike about Strike Graph?** I have not experienced any downside of Strike Graph as of yet. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is helping to keep the organization compliant with the ISO27001 Compliance. **Official Response from Cayla Marshall:** > Antonio, we're so glad to hear you're enjoying your Strike Graph experience! Thank you for being a valued Strike Graph user, and we're looking forward to continued compliance success! ### 29. Great platform to guide you through SOC **Rating:** 5.0/5.0 stars **Reviewed by:** Donna V. | Director, Mid-Market (51-1000 emp.) **Reviewed Date:** September 20, 2023 **What do you like best about Strike Graph?** The platform demonstrates ongoing innovation, consistently introducing new features and improvements that enhance user experience and operational efficiency. **What do you dislike about Strike Graph?** All suggestions incorporated. That is one of the things I love about StrikeGraph. **What problems is Strike Graph solving and how is that benefiting you?** Getting ready for SOC ### 30. Integrations, Permissions and AI Need Major Improvement **Rating:** 1.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** October 16, 2025 **What do you like best about Strike Graph?** Standalone "Request" Module - not many GRC tools have one and StrikeGraph's lets you fully describe evidence to both the AI and the submitter. **What do you dislike about Strike Graph?** Faulty, limited, confusing terraform integrations. Non-terraform integrations were also extremely limited. VerifyAI was unreliable / buggy. No audit portal for auditors to work in. No granular permissions. No trust portal. Cannot delete unnecessary requests or controls (including StrikeGraph's poorly crafted generic controls / requests). Permissions structures were not granular. Uploading manual evidence was a chore - automated evidence was terrible. **What problems is Strike Graph solving and how is that benefiting you?** Strike graph did not do as intended. We needed a tool that we could maintain our risks, controls and policies. We also needed a centralized tool to run audits out of semi-annually. It was bad at both of those things. In summary, it did not solve our problems or benefit us. **Official Response from Lisa Ash:** > Hi, thank you for taking the time to share your feedback. We’re sorry to hear that your experience didn’t meet expectations and appreciate your honesty. Our team is reviewing and digesting your comments carefully. We’re committed to providing a good experience for all our customers. ### 31. Outstanding Customer Service Sets StrikeGraph Apart **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about Strike Graph?** The most helpful part of StrikeGraph is the wonderful customer service they provide. Anytime I have had a question I get an immediate response from their team eager to help. They also reach out frequently to check in to see how things are going. As far as the product itself goes, I like how easy the dashboard is to navigate. **What do you dislike about Strike Graph?** I cant say there is anything I really dislike about StrikeGraph. There are a few things I could recommend, like adding semi-annual cadence for evidence and chain of command for approvals of evidence. But overall I'm satisfied with the product. **What problems is Strike Graph solving and how is that benefiting you?** Strikegraph provides a place for us to store policies and provides us with an "expiration" which is an excellent reminder that its time for annual review of certain policies. ### 32. From Beginner to Certified - Easy as 1, 2, 3 **Rating:** 5.0/5.0 stars **Reviewed by:** Sean H. | Chief Operating Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 25, 2025 **What do you like best about Strike Graph?** The software is super clear about what needs to be done, as well as provides the samples and templates to get moving forward. As each piece of evidence and controls 'go green', it's almost fun, like playing a game. The dashboards also tell you what you need to know, quickly, every time. Outside of the software, the team provides amazing support throughout the journey. They respond quickly, with accurate information and follow-up. **What do you dislike about Strike Graph?** It's a picky thing, but they didn't tell us they used Panda Docs for e-signatures, so we lost time a number of times with important documents ending up in our Junk folders, or ignored as phishing attempts. **What problems is Strike Graph solving and how is that benefiting you?** Organizing the structure and requirements of SOC2 Compliance. The solution 'connects the dots', and guides each element that is required. It allows the implementing company to think about 'how' they'll implement, measure and report on processes and controls vs. waste time 'digging around' trying to figure out 'what' to do. ### 33. Organized and Structured **Rating:** 5.0/5.0 stars **Reviewed by:** Carmen A. | Operations, Telecommunications, Mid-Market (51-1000 emp.) **Reviewed Date:** August 19, 2025 **What do you like best about Strike Graph?** I like how organized the system is and how it allows us to stay on track, assign, and update while looking clean and organized **What do you dislike about Strike Graph?** I do not have any negative feedback. The system does everything I would want it to do for our needs. **What problems is Strike Graph solving and how is that benefiting you?** Overall, Strike Graph is taking something that used to be a burden and turning it into a streamlined process, freeing up our resources to focus on growth and customer success while still meeting critical security and compliance expectations. ### 34. Effortless to Use with Excellent Reporting and UI **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about Strike Graph?** Ease of use, reporting, guided usage, user interface **What do you dislike about Strike Graph?** None so far, it has served very well the purpose and we are considering increasing the usage. **What problems is Strike Graph solving and how is that benefiting you?** Continuos SOC 2 certification ### 35. A Game-Changer for Scalable Compliance Management **Rating:** 4.0/5.0 stars **Reviewed by:** Andres T. | Compliance Manager, Enterprise (> 1000 emp.) **Reviewed Date:** May 27, 2025 **What do you like best about Strike Graph?** Strike Graph offers a highly intuitive interface that simplifies the journey to compliance. The automation of control mapping and readiness assessments significantly reduces manual effort, making it easier for teams to prepare for audits. The customizable framework also allows integration and alignment with multiple standards like SOC 2, PCI, and HIPAA in one centralized platform. **What do you dislike about Strike Graph?** While the platform is robust, the initial onboarding can be overwhelming for users who are new to compliance workflows. A bit more guided support during the first few weeks, such as built-in tutorials or step-by-step wizards, would improve the experience for less-experienced teams. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is solving the problem of fragmented and manual compliance workflows by centralizing our audit readiness across multiple frameworks like SOC 2, HIPPA, and PCI. Before implementing Strike Graph, we relied on spreadsheets, email threads, and siloed documentation, which created inefficiencies, delays, and audit risks. With Strike Graph, we benefit from a structured, scalable system that guides our team through evidence collection, control validation, and risk assessment, all in one place. This has resulted in faster audit preparation, improved cross-functional collaboration, and greater visibility into our overall compliance posture. The platform’s automation features and integrations have reduced the operational burden on our teams, allowing us to focus more on continuous improvement rather than chasing paperwork. It’s also helped build trust with enterprise clients by showing we’re audit-ready and proactive about data protection. ### 36. Top Features of Strike Graph: User-Friendly, Comprehensive, and Excellent Support **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** May 15, 2024 **What do you like best about Strike Graph?** What I like best about Strike Graph is how intuitive and user-friendly the platform is. I use it daily and we’ve found it incredibly easy to navigate, manage, and maintain our SOC 2 compliance program. The structure of the tool simplifies the process of tracking controls, uploading evidence, and monitoring progress. It’s been instrumental in helping us stay organized and on top of our audit requirements with minimal friction and implementation was a breeze. Overall, it’s a great platform that has made our compliance journey much smoother. **What do you dislike about Strike Graph?** Given its ease of use it is difficult to find fault, however I would personally like to see more reporting capabilities including smart formatting for .pdf outputs such as the "Security Overview" report, it would be super cool if the pdf file included a tick and wording like "in place" or "in progress" for each control the same as it does on screen. That said, the support team has been responsive, and the platform continues to evolve in the right direction. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is solving the problem of complex and time-consuming cybersecurity compliance. By automating compliance processes, it reduces the manual effort required for tasks such as evidence collection, risk assessments, and control monitoring. This not only saves time but also ensures accuracy and consistency in compliance efforts. The platform's comprehensive coverage of various compliance frameworks allows us to manage all our compliance needs in one place, simplifying the overall process. Additionally, the continuous monitoring and real-time updates help us stay ahead of potential issues, ensuring we maintain ongoing compliance. The dedicated customer support and integration with other tools further streamline our compliance management, making it easier to keep our evidence items current and efficiently handle any queries or issues that arise. ### 37. An effective tool for managing our certification process **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Aviation & Aerospace | Enterprise (> 1000 emp.) **Reviewed Date:** August 07, 2025 **What do you like best about Strike Graph?** As a cybersecurity specialist, I’ve found Strike Graph to be an effective tool for managing our certification process. The platform’s intuitive interface and automation capabilities have significantly improved the efficiency of our evidence collection and organization. One of the most valuable aspects is how Strike Graph maps our existing controls to certifications requirements. It streamlines the process by automatically identifying gaps, and maintaining a state of audit readiness. The dashboards provide clear visibility into our compliance posture, and the centralized repository ensures that all documentation is well-organized and accessible. Overall, Strike Graph has helped us approach compliance in a more structured and proactive way. **What do you dislike about Strike Graph?** I haven’t encountered any particular difficulties with the platform. It’s been reliable in helping us manage compliance tasks. **What problems is Strike Graph solving and how is that benefiting you?** Before using Strike Graph, gathering evidence for certifications was time-consuming and scattered across different systems. ### 38. Great Team and User-Friendly, Very Useful **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** October 16, 2025 **What do you like best about Strike Graph?** The team is great, and the platform is easy to use and extremely useful. Its evolving features, such as the questionnaires, have helped us streamline our processes more efficiently. **What do you dislike about Strike Graph?** Overall, we were satisfied with Strike Graph, and I can't think of anything in particular to mention! **What problems is Strike Graph solving and how is that benefiting you?** We chose Strike Graph to help us with our SOC2 audit, and thanks to their platform, we successfully obtained SOC 2 certification for our organization. This achievement has had a significant positive impact on our company. Since Strike Graph is a recognized name, having their support makes our certificate more trusted by many of our clients. ### 39. Outstanding Customer Success Team and Seamless Experience **Rating:** 4.5/5.0 stars **Reviewed by:** Deep S. | Growth & Strategy Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** November 26, 2025 **What do you like best about Strike Graph?** The people. Their CS team was an amazing partner and helped us navigate through each our our need seamlessly. **What do you dislike about Strike Graph?** Nothing a the moment. They're fantastic! **What problems is Strike Graph solving and how is that benefiting you?** Our aim was to achieve SOC compliance, and StrikeGraph helped us do this without any hassle or surprise. **Official Response from Stephanie Lorraine:** > Thank you, Deep! It is such a joy supporting you and your team through the journey of SOC 2 compliance. Congratulations on your successful audit and I look forward to continuing our work together! ### 40. User Friendly and Helpful Service **Rating:** 5.0/5.0 stars **Reviewed by:** Mickella B. | HR Advisor, Mid-Market (51-1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Strike Graph?** What I like best about Strike Graph is how intuitive and user-friendly the platform is. It simplifies complex compliance processes and makes it easy to track progress, manage documentation, and stay audit-ready. The support team is also incredibly responsive and knowledgeable, which adds a lot of value **What do you dislike about Strike Graph?** While the platform is generally easy to use, some features could be more customizable to better fit our organization’s unique workflows. Additionally, a few parts of the interface could be more intuitive, especially for new users who aren’t familiar with compliance tools **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is helping our organization achieve a specific compliance milestone. ### 41. Simple and clear user interface **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** September 05, 2024 **What do you like best about Strike Graph?** Clean dashboard that makes complex controls manageable. **What do you dislike about Strike Graph?** he provided policy templates are a major time-saver, helping companies move from scattered documents to a centralized system of record. **What problems is Strike Graph solving and how is that benefiting you?** Simplify auditing tasks. **Official Response from Katie Burgess:** > It's great to hear that Strike Graph is simplifying your auditing tasks. For more instructional information and sample evidence, feel free to check out our resource center within Strike Graph. If you're not finding the example you're looking for, feel free to reach out to our team through our in-platform chat. ### 42. Amazing Company could not recommend a better team to help with audits. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** November 20, 2023 **What do you like best about Strike Graph?** The staff are extremely helpful, and the product itself is thoughtfully designed. Being able to pull policies directly from O365 SharePoint has saved me hours of work. I also appreciate that they are always introducing new features. **What do you dislike about Strike Graph?** There is nothing I dislike about this service. We have been with them for several years, and they consistently stay attentive to our needs. **What problems is Strike Graph solving and how is that benefiting you?** They offer a unified platform that covers all our audit requirements, from gathering evidence and conducting penetration testing to managing the entire audit process. ### 43. A great partnership that manages our compliance requirements **Rating:** 5.0/5.0 stars **Reviewed by:** Rana K. | Senior Security and Compliance Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** March 05, 2024 **What do you like best about Strike Graph?** Very helpful customer success team. We worked with Stephanie Lorraine for both our SOC2 type 2 audit. She made sure we have all the necessary informations, planned the work for us and provided very detailed guideline for the audit. All important dates regarding audit was communicated ahead of time that helped us to plan everything without any stress. StrikeGraph platform is easy to use and our team was able to navigate through the platform very easily. And we use this platform very frequently to manage our controls. Integration with out Google drive is a plus point that made our document management very easy. Audit team shared very precise informations regarding anythin they need as evidence/supporting information for our controls. Overall we have a great audit journey with StrikeGraph. **What do you dislike about Strike Graph?** We liked working with Strike Graph. Nothing to add here. **What problems is Strike Graph solving and how is that benefiting you?** It made our SOC2 type 1 and type 2 audit easy by centralizing all related controls and evidance with it's platform. ### 44. I use strike graph daily as my daily responsibility at my job. **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Consulting | Small-Business (50 or fewer emp.) **Reviewed Date:** September 12, 2025 **What do you like best about Strike Graph?** I like how it is set up easily and color coordinated. You can filter easily to consolidate your controls and evidence. I also like how the compliance dashboard shows you the progress made. It was easy to learn when I onboarded. The chat box feature has been my best friend. Between the AI feature and live representatives, I always find what I need. **What do you dislike about Strike Graph?** It can be difficult to find a specific piece of evidence. I wish there was a way to search by attachments since often I need to see previous attachments. **What problems is Strike Graph solving and how is that benefiting you?** It is helping us get SOC 2 Type 2 certified. **Official Response from Lisa Ash:** > Thank you for your feedback! We truly appreciate you sharing your Strike Graph experience, and we're reviewing your request to search by attachment name and we'll consider it for our product roadmap. Have a great day! -Strike Graph Customer Success team ### 45. Cuts Audit Prep Time Significantly **Rating:** 4.0/5.0 stars **Reviewed by:** Nicole H. **Reviewed Date:** October 15, 2025 **What do you like best about Strike Graph?** I appreciate how Strike Graph significantly reduces the time spent on gathering information for SOC 2 audits by almost 70%. The ability to connect it directly to Google Drive enhances workflow efficiency, eliminating the need to save and reupload documents. I also really appreciate our responsive account manager, who provides assistance whenever needed. **What do you dislike about Strike Graph?** I would like there to be more integration options. **What problems is Strike Graph solving and how is that benefiting you?** I use Strike Graph to streamline SOC 2 audits, reducing data gathering time by 70% and allowing automatic data collection, enhancing audit efficiency. ### 46. A Streamlined and Supportive Platform for SOC 2 Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Shreyas P. | Software engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** May 29, 2025 **What do you like best about Strike Graph?** Strike Graph simplifies the complex and often overwhelming process of SOC 2 and other compliance frameworks. The platform provides clear, step-by-step guidance, making it easier to manage tasks, collect evidence, and track audit readiness. What stands out the most is the responsiveness of their customer support and the expert guidance from their team. The UI is intuitive, and their library of pre-built controls and templates accelerates onboarding and implementation significantly. **What do you dislike about Strike Graph?** While Strike Graph is incredibly helpful, the platform could benefit from more integrations with popular DevOps and ticketing tools to reduce manual effort further. Also, the reporting features could be more customizable for generating executive-friendly summaries. However, these are minor issues and do not significantly impact overall usability or effectiveness. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is solving the challenge of navigating complex compliance frameworks like SOC 2, ISO 27001, and HIPAA without needing a dedicated internal compliance team. It centralizes all compliance-related activities—risk assessments, control documentation, evidence collection, and audit preparation—into one streamlined platform. This significantly reduces time spent on manual tracking and coordination. For us, it has shortened the audit preparation cycle, increased cross-team visibility, and given us confidence in our security posture when engaging with customers or partners. ### 47. A powerful tool for virtualizing Data Trends **Rating:** 5.0/5.0 stars **Reviewed by:** Thanushree B. | GRC Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** May 28, 2025 **What do you like best about Strike Graph?** The platform offers a user-friendly interface with clear workflows that make it easy to map controls, manage evidence, and track progress toward certification. The onboarding process is well-structured, and their team provides clear guidance to help configure the platform to match your organization’s needs. I also appreciate the flexibility it offers. The onboarding process is well-structured. The Strike Graph team is responsive. It's useful on a regular basis.it would be great to see a broader list of native integrations to reduce manual evidence collection even further. **What do you dislike about Strike Graph?** For users who are new to compliance or security frameworks, some of the terminology and processes might feel a bit overwhelming without additional guidance or tutorials built into the platform. **What problems is Strike Graph solving and how is that benefiting you?** Strike Graph is solving the problem of complex, time-consuming, and often unclear compliance processes—particularly for standards like SOC 2, ISO 27001, and HIPAA. The biggest benefit is visibility and control. Instead of wondering where we stand in our compliance process, we now have a clear, real-time view of progress. Strike Graph helps us move faster, stay organized, and maintain trust with customers by proving that our security and compliance programs are strong and well-documented. ### 48. StrikeGraph makes compliance easy! **Rating:** 5.0/5.0 stars **Reviewed by:** Christine P. | Director of Operations, Small-Business (50 or fewer emp.) **Reviewed Date:** August 07, 2025 **What do you like best about Strike Graph?** StrikeGraph's platform brings a heightened level of organization to compliance. Their staff is very knowledgeable, supportive and wonderful to work with! Anytime we have questions, Stephanie is quick to respond with all the necessary details! The audit process is quick and painless! **What do you dislike about Strike Graph?** Our first year with StrikeGraph required a great amount of manual work, but since then it's been a breeze! **What problems is Strike Graph solving and how is that benefiting you?** StrikeGraph keeps our SOC2 Type 2 and HIPAA compliance organized and in one place. **Official Response from Stephanie Lorraine:** > Thank you so much for your thoughtful review! It is such a pleasure working with you and your entire team. I'm particularly happy to hear that the amount of manual work has decreased, helping make compliance a smoother, more organized and efficient process. Thank you again for taking the time to share your experience, it means a lot! ### 49. Great Interface for Controls, But disappointed with AI Automation at the time of its first release. **Rating:** 4.0/5.0 stars **Reviewed by:** Olivier C. | Chief Information Security Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** October 17, 2025 **What do you like best about Strike Graph?** The interface to manage controls and post evidences. **What do you dislike about Strike Graph?** The automatic filling of a form with the artificial intelligence system; in July 2025, it did not correspond to my expectations. **What problems is Strike Graph solving and how is that benefiting you?** Gathering all information needed by a SOC2 Type-II Audit. **Official Response from Stephanie Lorraine:** > Hi Olivier, thank you for the feedback and for highlighting how Strike Graph has supported your SOC 2 Type 2 journey. Congratulations on a successful audit! We appreciate your input on our AI Questionnaires feature and understand how early versions may not have met expectations. We’re continuously enhancing our AI capabilities and want future updates to align with your needs. I’ll reach out soon to discuss your experience in more detail. ### 50. Amazing Communication, Teamwork, and Helpful Resources **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** January 29, 2026 **What do you like best about Strike Graph?** communication and teamwork was amazing. I really could not believe how amazing your resources are. Everyone was so helpful! **What do you dislike about Strike Graph?** It was fine. It was a decent amount of clicking, but I think that can't be avoided. your team helped make it easier **What problems is Strike Graph solving and how is that benefiting you?** it helped me upload compliance documents for a client. ## Strike Graph Discussions - [What is Strike Graph used for?](https://www.g2.com/discussions/what-is-strike-graph-used-for) - [View Strike Graph pricing details and edition comparison](https://www.g2.com/products/strike-graph/reviews?qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-05-13+09%3A30%3A56+-0500&secure%5Bsession_id%5D=94a22886-4b30-47c6-8387-fd2ceff414b7&secure%5Btoken%5D=1a98b7c87d39e43c0bd50d67f0b576cd82381191b564a5faedc7a4c4cd305ab0&format=llm_user) ## Strike Graph Integrations - [Achieve](https://www.g2.com/products/macmillan-learning-achieve/reviews) - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews) - [AlexisHR](https://www.g2.com/products/alexishr/reviews) - [Altera](https://www.g2.com/products/altera/reviews) - [AWS App Mesh](https://www.g2.com/products/aws-app-mesh/reviews) - [AWS Backup](https://www.g2.com/products/aws-backup/reviews) - [AWS Batch](https://www.g2.com/products/aws-batch/reviews) - [AWS Certificate Manager](https://www.g2.com/products/aws-certificate-manager/reviews) - [AWS CloudFormation](https://www.g2.com/products/aws-aws-cloudformation/reviews) - [AWS CloudHSM](https://www.g2.com/products/aws-cloudhsm/reviews) - [AWS Cloud Map](https://www.g2.com/products/aws-cloud-map/reviews) - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [AWS Cost and Usage Report](https://www.g2.com/products/aws-cost-and-usage-report/reviews) - [AWS Cost Explorer](https://www.g2.com/products/aws-cost-explorer/reviews) - [AWS Data Pipeline](https://www.g2.com/products/aws-data-pipeline/reviews) - [AWS Direct Connect](https://www.g2.com/products/aws-direct-connect/reviews) - [AWS Directory Service](https://www.g2.com/products/aws-directory-service/reviews) - [AWS Elastic Beanstalk](https://www.g2.com/products/aws-elastic-beanstalk/reviews) - [AWS Glue](https://www.g2.com/products/aws-glue/reviews) - [AWS Identity and Access Management (IAM)](https://www.g2.com/products/aws-identity-and-access-management-iam/reviews) - [AWS IoT Core](https://www.g2.com/products/aws-iot-core/reviews) - [AWS Key Management Service (KMS)](https://www.g2.com/products/aws-key-management-service-kms/reviews) - [Azure](https://www.g2.com/products/hopem-azure/reviews) - [BambooHR](https://www.g2.com/products/bamboohr/reviews) - [Breathe](https://www.g2.com/products/centurion-management-systems-breathe/reviews) - [CharlieHR](https://www.g2.com/products/charliehr/reviews) - [ChartHop](https://www.g2.com/products/charthop/reviews) - [Cloudwatch Logs connector for AWS Glue](https://www.g2.com/products/cloudwatch-logs-connector-for-aws-glue/reviews) - [Confluence](https://www.g2.com/products/confluence/reviews) - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Grok](https://www.g2.com/products/xai-grok/reviews) - [Gusto](https://www.g2.com/products/gusto/reviews) - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews) - [HR Cloud](https://www.g2.com/products/hr-cloud-hr-cloud/reviews) - [HR Partner](https://www.g2.com/products/hr-partner/reviews) - [Humaans](https://www.g2.com/products/humaans/reviews) - [Humanforce](https://www.g2.com/products/humanforce/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Justworks](https://www.g2.com/products/justworks/reviews) - [Lano](https://www.g2.com/products/lano/reviews) - [Lucca](https://www.g2.com/products/lucca/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Namely](https://www.g2.com/products/namely/reviews) - [Nmbrs](https://www.g2.com/products/nmbrs/reviews) - [Officient](https://www.g2.com/products/officient/reviews) - [Paychex](https://www.g2.com/products/paychex/reviews) - [Paylocity](https://www.g2.com/products/paylocity/reviews) - [PeopleHR On-Premise](https://www.g2.com/products/peoplehr-on-premise/reviews) - [Personio](https://www.g2.com/products/personio/reviews) - [ProLiant](https://www.g2.com/products/proliant/reviews) - [Sage HR](https://www.g2.com/products/sage-hr/reviews) - [SAP SuccessFactors HCM](https://www.g2.com/products/sap-sap-successfactors-hcm/reviews) - [Sesame](https://www.g2.com/products/landytech-sesame/reviews) - [Square Payroll](https://www.g2.com/products/square-payroll/reviews) - [TriNet](https://www.g2.com/products/trinet/reviews) - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews) - [Workday](https://www.g2.com/products/workday-workday/reviews) ## Strike Graph Features **Security** - Compliance Monitoring - Anomoly Detection - Data Loss Prevention - Cloud Gap Analytics **Generative AI** - AI Text Summarization - AI Text Generation **Generative AI** - AI Text Summarization **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Platform AI Features - Policy Management** - Reports - Workflow Management **Agentic AI - Regulatory Change Management** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Natural Language Interaction - Proactive Assistance **Security** - Data Security - Data loss Prevention - Security Auditing **Administration** - Policy Enforcement - Auditing - Workflow Management **Documentation - Audit Management** - Templates & Forms - Checklists **Identity** - SSO - Governance - User Analytics **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance ## Top Strike Graph Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,403 reviews) - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,148 reviews) - [Secureframe](https://www.g2.com/products/secureframe/reviews) - 4.7/5.0 (794 reviews)