Stop screenshotting.
Let the agent do it.
The Evidence Agent is a Chrome extension for Strac Comply. Tell it what you need. It clicks through the admin page (AWS, Okta, GitHub, anything you sign in to), takes a watermarked screenshot, and files it on your controls.
Already use Strac Comply? Add to Chrome
The last mile is still manual.
Strac Comply’s daily tests collect evidence from the systems you connect. What is left is screenshots of admin pages. The agent takes that job off your plate.
Pages no API can read
Integrations collect a lot, but some evidence only exists as a settings page in an admin console. Someone still has to go get it.
Screenshots auditors question
A cropped image with no date or URL invites the same two questions: when was this taken, and where?
Hours of clicking and filing
Find the page, take the shot, rename the file, upload it, attach it to the right control. Then do it all again next quarter.
How it works
From “I dread screenshot week” to “it’s already filed” in four steps.
Install and sign in
Add the extension to Chrome. Sign in to Strac Comply in the same browser and the extension uses that session. No second login.
Say what you need
Type a goal, like "Show that MFA is required for Okta admins." Or open a control in Strac Comply and click Collect with extension.
The agent finds the page
AI reads the page and picks the next click: open a menu, scroll, go to the right screen. You watch each step in the side panel.
Review, redact, save
It takes a watermarked screenshot. Black out anything sensitive, confirm the controls AI suggests, and save. The evidence lands on those controls.
Every screenshot answers “when and where?”
The capture details are stamped right on the image: date, time, time zone, who captured it and the page URL. So your auditor doesn’t have to ask when it was taken. The answer is on the screenshot.
- Watermark with date, time, time zone, who captured it and the page URL
- Filed on the controls you confirm, in every framework you run
- Stored in your own Strac Comply workspace, encrypted at rest
- Sensitive fields blacked out before the image is saved
What the agent does today
Everything on this page works now. No “coming soon” fine print.
It decides, it doesn't replay
AI reads each page and picks the next click. There is no script to record, so a redesigned admin page does not mean starting over.
Watermarked screenshots
Each screenshot is stamped with the date, time, time zone, who captured it and the page URL. Your auditor can see where and when at a glance.
One capture, many controls
Attach one screenshot to every control it proves, across SOC 2, ISO 27001, NIST CSF 2.0, HIPAA, PCI DSS and more. AI suggests controls from the frameworks you run. You confirm.
Redact before you save
Drag a box over anything sensitive. The black box is burned into the image before it leaves your browser.
Full-page capture
Long settings pages are stitched into one image, so your auditor sees the whole list, not just the top of it.
Quick capture
Already on the right page? One click takes the shot without running the agent.
If you can sign in to it, the agent can capture it.
There is no fixed list. Anywhere you take a screenshot by hand today, the agent can go.
Connect a system and you may not need a screenshot at all: daily tests collect that evidence for you. See every integration
Screenshot week, before and after
The same job, without the busywork.
Honest answers
Do I need a Strac Comply account?
Yes. The extension files evidence into your Strac Comply workspace. Start a free trial, then add the extension to Chrome.
Where do screenshots get stored?
In your own Strac Comply workspace, encrypted at rest and scoped to your company. No other customer can see them.
What does the AI see?
To pick the next click, the agent sends the page's text and a small screenshot of what is on screen to our AI model. It only does this while a capture you started is running.
Why does the extension need access to all sites?
So it can work in whichever admin console you point it at: AWS, Okta, or your own internal app. It only captures when you start a capture. There is no background monitoring.
How is this different from a recorded walkthrough?
A recording replays fixed steps, so it can break when a page changes. The agent reads the page each time and picks the next click, the way you would.
Does it work for tools that aren't in your integration list?
Yes. If it is a web page you can sign in to in Chrome, the agent can capture it. The integration list is not a fence.
How does control mapping work?
AI suggests up to three controls from the frameworks you run, based on the page. You confirm them or pick your own before you save.
Make screenshot week a few clicks.
Start a free trial, add the extension, and file your first piece of evidence today.
Already use Strac Comply? Add to Chrome
See where the agent fits: AI-native compliance