The website is easy to navigate with clearly defined question and answer sections. Review collected by and hosted on G2.com.

Nothing to really dislike as the forms are created by the company. Review collected by and hosted on G2.com.

CMMC has always felt vague to me. Strike Graph broke it down into simple, doable steps that were straightforward and easy to follow. Review collected by and hosted on G2.com.

I only needed CMMC Level 1, but I still had to sort through Level 2 controls because they were never successfully removed from my dashboard. Review collected by and hosted on G2.com.

One single location for all the documentation makes it easier for everyone to know where to store the documentation Review collected by and hosted on G2.com.

The most challenging aspect of Strike Graph in my experience involved searching past documentation stored materials. While it may have been an user error, sometimes being able to retrieve past documents was confounding. Sometimes it felt that documents may have become corrupted in storage or the formatting changed somehow Review collected by and hosted on G2.com.

The Strike Graph dashboards continue to improve with more relevant and helpful information. I love having our entire information security program managed on this platform, it saves us a massive amount of time. Great people to work with too! Review collected by and hosted on G2.com.

I think that a simple warning 7 days before the Auto Collection runs to give the user a reminder to update their documentation before the Auto Collection runs, if they forget then give an alert after Auto Collection if the document did not change. I know the AI engine tries to do this, but I would just make it a rule, if no changes, flag it for review. Review collected by and hosted on G2.com.

I liked that Strike Graph was easy to use once I figured out how the user interface worked. The user experience was really straightforward, and it provided the output I needed for my level one assessment. Review collected by and hosted on G2.com.

The user interface was not as intuitive as I initially thought. There were several options and things that needed to be clicked, but like I said, once I figured out what the user experience looked like and felt like, I was able to complete my tasks. Review collected by and hosted on G2.com.

Having all my reminders centralized in one place, like the Compliance Dashboard, has made it much easier to stay organized and keep track of everything. I really appreciate being able to upload all common file formats using drag and drop. The ability to assign issues to specific users is extremely useful, and the email notifications about expiring evidence are a great help. Thank you for making SOC2 compliance so much less time-consuming. Review collected by and hosted on G2.com.

I've encountered some difficulties when trying to set up automated evidence collection. However, I believe these issues are likely related to the security measures in place on our company's intranet. Review collected by and hosted on G2.com.

What I like best about Strikegraph is how seamlessly the platform brings both SOC 2 compliance and penetration testing together in one place. Having a unified solution saves our team significant time and reduces the complexity that usually comes with managing these processes separately. The user interface is intuitive, making it easy to track our progress and ensure all requirements are met. I’m particularly impressed with the depth of expertise the Strikegraph team brings—they offer clear, actionable guidance not just for SOC 2 but also for pen testing, making the entire compliance and security journey much more manageable and efficient. Review collected by and hosted on G2.com.

While our experience with Strikegraph has been overwhelmingly positive, one area for improvement might be further streamlining the integration of SOC 2 compliance tasks and penetration testing workflows. Initially, it required some effort to get our team fully up to speed on how both components—compliance and pen testing—fit together within the platform. Additional tailored onboarding resources or more detailed walkthroughs for managing both SOC 2 and penetration testing in parallel would be helpful. Nonetheless, the Strikegraph support team has always been responsive in addressing any questions or challenges we encountered. Review collected by and hosted on G2.com.

The Strike Graph platform is very intuitive and easy to use. Our reps walked us through every aspect of the platform, and explained the whole process of getting SOC2 certification. Even though it's overwhelming, their help documentation and extensive templates for every policy or compliance email you may need has made getting our documentation in order much faster than writing everything from scratch. Review collected by and hosted on G2.com.

It would be nice to have a bit more handholding, but honestly they have provided so many resources and online guidance that it's really unnecessary. And customer support is fantastic if you have a question. Review collected by and hosted on G2.com.

My colleagues at Medadept and I appreciate the personal attention the Strike Graph team offered through our two SOC 2 audit engagements in 2025. Review collected by and hosted on G2.com.

The online Strike Graph platform has a lot of moving parts that requires some learning time. Again, their personalized support was valuable in getting through the learning curve, Review collected by and hosted on G2.com.

The Strike Graph UI is very intuitive & user-friendly. Things like drag and drop make it very easy to load evidence. The policy templates were an AMAZING help. Review collected by and hosted on G2.com.

If you deactivate evidence for one control, it will deactivate for all controls. I believe this is a bug and can be improved upon for ease & user experience. Review collected by and hosted on G2.com.