No more screenshots by hand.
Let the agent take them.
The Evidence Agent is a Chrome extension for Strac Comply. Say what you need, and it opens the admin page in AWS, Okta, GitHub or anything you sign in to. Then it takes a watermarked screenshot and files it on your controls.
Already use Strac Comply? Add to Chrome
Integrations collect most evidence. Admin screenshots are still manual.
Strac Comply’s daily tests collect evidence from the systems you connect. That leaves the screenshots of admin pages. The agent does that job for you.
Pages no API can read
Integrations collect a lot, but some evidence only exists as a settings page in an admin console. Someone still has to go get it.
Screenshots auditors question
A cropped image with no date or URL makes your auditor ask the same 2 questions: when, and where?
Hours of clicks and uploads
Find the page, take the shot, rename the file, upload it, attach it to the right control. Then do it all again next quarter.
How it works.
From “I dread screenshot week” to “it’s already filed” in 4 steps.
- 1
Install and sign in
Add the extension to Chrome. Sign in to Strac Comply in the same browser and the extension uses that session. No second login.
- 2
Say what you need
Type a goal, like "Show that Okta admins must use MFA." Or open a control in Strac Comply and click Collect with extension.
- 3
The agent finds the page
AI reads the page and picks the next click: open a menu, scroll, go to the right screen. You watch each step in the side panel.
- 4
Review, redact, save
It takes a watermarked screenshot. Black out anything sensitive, confirm the controls AI suggests, and save. Strac Comply files the evidence on those controls.
Every screenshot answers “when and where?”
The agent stamps the capture details on the image: date, time, time zone, who captured it and the page URL. Your auditor doesn’t have to ask when you took it. The answer is on the screenshot.
- Watermark with date, time, time zone, who captured it and the page URL
- Filed on the controls you confirm, in every framework you run
- Stored in your own Strac Comply workspace, encrypted at rest
- Sensitive fields blacked out before you save the image
admin.okta.com/admin/access/multifactor/policies
Multifactor authentication
May 5, 2026 09:12:48 AM America/New_York
Captured by: ada@example.com
admin.okta.com/admin/access/multifactor/policies
Shipped, not promised. What the agent does today.
Everything on this page works now. No “coming soon” fine print.
It decides, it doesn't replay
AI reads each page and picks the next click. There is no script to record. When an admin page changes its design, you don't start over.
Watermarked screenshots
The agent stamps each screenshot with the date, time, time zone, who captured it and the page URL. Your auditor sees where and when at a glance.
One capture, many controls
Attach one screenshot to every control it proves. This works across SOC 2, ISO 27001, NIST CSF 2.0, HIPAA, PCI DSS and more. AI suggests controls from the frameworks you run, and you confirm them.
Redact before you save
Drag a box over anything sensitive. The extension burns the black box into the image before the image leaves your browser.
Full-page capture
The agent stitches a long settings page into one image. Your auditor sees the whole list, not only the top of it.
Quick capture
Already on the right page? Take the shot with one click and skip the agent.
If you can sign in to it, the agent can capture it.
There is no fixed list. Anywhere you take a screenshot by hand today, the agent can go.
- AWS
- Okta
- Google Workspace
- Microsoft 365
- GitHub
- GitLab
- Jira
- Confluence
- Slack
- Salesforce
- Stripe
- Datadog
- CrowdStrike
- Jamf
- Auth0
- Snowflake
- Cloudflare
- PagerDuty
- Intercom
- Zendesk
- HubSpot
- NetSuite
- Workday
- BambooHR
- + your own internal app
Connect a system and you may not need a screenshot at all. Daily tests collect that evidence for you. See all 100+ integrations
Screenshot week, before and after.
The same job, without the busywork.
Honest answers.
Do I need a Strac Comply account?
Yes. The extension files evidence into your Strac Comply workspace. Start a free trial, then add the extension to Chrome.
Where do my screenshots go?
Into your own Strac Comply workspace, encrypted at rest. No other customer can see them.
What does the AI see?
To pick the next click, the agent sends an AI model the page's text. It also sends a small screenshot of what is on screen. It does this only during a capture you start.
Why does the extension need access to all sites?
So it can work in whichever admin console you point it at: AWS, Okta, or your own internal app. It only captures when you start a capture. There is no background monitoring.
How is this different from a recorded walkthrough?
A recording replays fixed steps, so it can break when a page changes. The agent reads the page each time and picks the next click, the way you would.
Does it work for tools that aren't in your integration list?
Yes. If it is a web page you can sign in to in Chrome, the agent can capture it. The integration list is not a limit.
How does control mapping work?
AI suggests up to 3 controls from the frameworks you run, based on the page. You confirm them or pick your own before you save.
Turn screenshot week into a few clicks.
Start a free trial, add the extension, and file your first piece of evidence today.
14-day free trial. No credit card. Plans from $4,995 per year. See pricing
Already use Strac Comply? Add to Chrome
See where the agent fits: AI-native compliance